CancelDll
LoadDll
Behavioral task
behavioral1
Sample
782d4b33df88802957cd78ab88ca2f92_JaffaCakes118.dll
Resource
win7-20240704-en
Target
782d4b33df88802957cd78ab88ca2f92_JaffaCakes118
Size
106KB
MD5
782d4b33df88802957cd78ab88ca2f92
SHA1
7759f253dd0710730c176bcbb7c4cdae41f6103f
SHA256
ee2e9408afc577de9f8ebf5b4218f7290640ad32b2abb5b9fa733cb3a6096e37
SHA512
d6b965d24d82307305225c07836ef8253ba2a7011457bf643f0defc12d69ed8e8b9e97efe0750b2f6ffc5c0d1732d03cf19088ec9aa3be928361fd250d8f7fcc
SSDEEP
1536:JVGqeHHrjdj9qcSE5Y1XXyxYcZIewi6mkpG+0HHGo2/Ar6tY8pC8W+YdKKMz:JKLjdjAcD2XTcm1i6jgHGoUQL+YxMz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
782d4b33df88802957cd78ab88ca2f92_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE