CancelDll
LoadDll
Behavioral task
behavioral1
Sample
790f84e529d87a7e206e053ef27672c1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
790f84e529d87a7e206e053ef27672c1_JaffaCakes118
Size
100KB
MD5
790f84e529d87a7e206e053ef27672c1
SHA1
09dd763fb04b06786ccf2cac991f15998fe0762f
SHA256
69f556e4b06856bd1be73df474cca3f06cad0eb87db86bba7077a1efd063bb05
SHA512
79777211b36df72339d7c62673d20559d47cb64eb8590a637c9cfc72662a72be9f6b6b59ca90eb6919b0aadf20049c4c29c7571a445dd09f291eddc426ca286d
SSDEEP
3072:TpoZP8ijIfaBfL9OIfz25Wx2cgUQXSWVyn/PQY:TpHiuaPqw2YQXK/N
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
790f84e529d87a7e206e053ef27672c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE