CancelDll
LoadDll
Behavioral task
behavioral1
Sample
83cea400dbd9b860958b40af4a717823_JaffaCakes118.dll
Resource
win7-20240704-en
Target
83cea400dbd9b860958b40af4a717823_JaffaCakes118
Size
109KB
MD5
83cea400dbd9b860958b40af4a717823
SHA1
9d1729d5a8720ec944a7f1a23dfd86976f6d16bc
SHA256
97aba568a081b96d2ca4c66f00099f7242124c378a7fb54b79c1d471f902ce0f
SHA512
341ff410ad875d3e3e4ebacee01ff2a57ac4a0efbed7dec3627e3a632c5d9b688a7570a4f2fc61663657fde690620af9eb98e262ce6121603cbbdbab45a09fd8
SSDEEP
1536:7rOUbmJ/ZS8DDfB3r3PQSkIoZJGp64uvUz7m8/qK8FM+yLJPFVaXCMGzESix:FbmhoODf8CpBuvsqz4gXpGzESix
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83cea400dbd9b860958b40af4a717823_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE