CancelDll
LoadDll
Behavioral task
behavioral1
Sample
834306c491b4f3825d62842b9098a4ff_JaffaCakes118.dll
Resource
win7-20240705-en
Target
834306c491b4f3825d62842b9098a4ff_JaffaCakes118
Size
95KB
MD5
834306c491b4f3825d62842b9098a4ff
SHA1
0f981aaea752cc2c00203ba0b165bcdb4d821ae4
SHA256
f3d1ef174c4d005768f62756e12e89d0f6af95c761a0c5a8da5f5a107b04d9ca
SHA512
388845e947837e4a16d5f6eb031d7e67b289cf4c8342f7c09b741621fc3495dabf154c8368639e0f2ec23f2c879f51cc69b619ee895b1e347e69118390f1f2a8
SSDEEP
1536:4G31s6OxArk6ytVNWaRU3t/WKn82e7YN+xu+26kCX8JJS:B3wxV33rq4t2e7z4+2n88JJS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
834306c491b4f3825d62842b9098a4ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE