CancelDll
LoadDll
Behavioral task
behavioral1
Sample
820f984f75806247d96169fb51712243_JaffaCakes118.dll
Resource
win7-20240704-en
Target
820f984f75806247d96169fb51712243_JaffaCakes118
Size
98KB
MD5
820f984f75806247d96169fb51712243
SHA1
c9f4db30ff1f4ea1ed6abc04509fbc31b1c32ccf
SHA256
6cf652093d9be3393fe29604c093368da0150599d660b2803629691cdc2637ad
SHA512
cb574d83f5ff6931af09bd5e1e2de70277ac1c2ba32e61a99f6e8507c3b3b6922b9d51ac950ddec92369cb9566df36c5487a423cd82565ae94d4e71efb6bf6f0
SSDEEP
1536:0pstl9F0gv/r7r2Zf3wazN6rWDjymw2erhCGuyERkGNFtZv2:0OtFNv/r7r0/zNOWDjymAhb+mGNjZe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
820f984f75806247d96169fb51712243_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE