CancelDll
LoadDll
Behavioral task
behavioral1
Sample
85761b94185afda6735b85eac317674d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
85761b94185afda6735b85eac317674d_JaffaCakes118
Size
109KB
MD5
85761b94185afda6735b85eac317674d
SHA1
6ad359fc08e35161bc2597c79ef439313b07c2cf
SHA256
31c2bf067885e5617b3743af22c81a452b623a353f4605c013a49379077497a1
SHA512
ef996edea5177e14cf6ba62bc11ea73f8a0b7b8657e95b113e43e3f7978dbf91bf9be8b5028cf88648e5d8f5590c15e0be822993e94230270e9c6bdd8bf7f383
SSDEEP
3072:l9L1xm6hpbVc2UdYrmm4y4QIxAmC283zqx:hnhppqdfbyB2C283+x
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85761b94185afda6735b85eac317674d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE