CancelDll
LoadDll
Behavioral task
behavioral1
Sample
836beb9426536ad0a46feb805d7f2c0b_JaffaCakes118.dll
Resource
win7-20240729-en
Target
836beb9426536ad0a46feb805d7f2c0b_JaffaCakes118
Size
132KB
MD5
836beb9426536ad0a46feb805d7f2c0b
SHA1
b8cdaef6ddb707414e27c3ecc67f7bbe85287c40
SHA256
2058b2294fc75b2a30c5bacd8076fe87da414916dd8c18da3d46d488f8d1b85f
SHA512
43731939bfa34dca5bf1dbb5e2c8b0f9cbe52e0fd7fb071d3ae51b2150c6a32b5f6dab8e835bc07b04d92c4c06ff1243f134663fc56a77ffaa1acebf6bb1df2a
SSDEEP
3072:W6QbzFrhmzVlbyR7sB2zqdUT/RsQRrlbw:W6CphmxcRgB2udu/RsQRrlbw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
836beb9426536ad0a46feb805d7f2c0b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE