CancelDll
LoadDll
Behavioral task
behavioral1
Sample
83d8043baa59c3a3d94af8457d5d267e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
83d8043baa59c3a3d94af8457d5d267e_JaffaCakes118
Size
85KB
MD5
83d8043baa59c3a3d94af8457d5d267e
SHA1
f008af1a4385061766253103e6a2b5518c74699d
SHA256
e2d88c7651312b6656075435a31723acabbf36474b4a3ceff45baf74b71739f1
SHA512
72ed0fad8ddc15602273a7ebfda7d17df324a4010c09bd70ceb46be6941f96038f40605bd9272c2a06517c79d0b3832627eda212db3478f87d382bf79259805a
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8x5GSBN5nxh/eh9Vqz+qDrid4EU:FfUxhDtZp8vIdCFxgSBNLFu94Dru4/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83d8043baa59c3a3d94af8457d5d267e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE