CancelDll
LoadDll
Behavioral task
behavioral1
Sample
823ab2fe21d1f73356cbfa6d8474cc25_JaffaCakes118.dll
Resource
win7-20240705-en
Target
823ab2fe21d1f73356cbfa6d8474cc25_JaffaCakes118
Size
96KB
MD5
823ab2fe21d1f73356cbfa6d8474cc25
SHA1
1ea813cae0bf22b77686918d372c78604b97afec
SHA256
8ce01b9a310fda863ad90fe5a94501c56be673edcdcb3264f199b2b30f61eccb
SHA512
bdef01d3dbae128187ef582310907bec6dde5ec751d10557e842361d515569c0aef1ad3fcf7517589ca9987cd3ed731a34ddb6e906e238beefc372d9ecbbf2d4
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr7tyKvy9G04ri15pjx3uE0Bfgvo0d:03/KeW8V3rQszsrZNvfd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
823ab2fe21d1f73356cbfa6d8474cc25_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE