CancelDll
LoadDll
Behavioral task
behavioral1
Sample
85f5bb34b589232de9344ef63bea10e5_JaffaCakes118.dll
Resource
win7-20240705-en
Target
85f5bb34b589232de9344ef63bea10e5_JaffaCakes118
Size
108KB
MD5
85f5bb34b589232de9344ef63bea10e5
SHA1
a3e06e2dbc89ea7688d38e1acdf19ff531416ee0
SHA256
1c32d214d46f66685d1103f25827eaab3702c7020070b62388d41ded4e37ebc9
SHA512
0c6a40159c84e8139b28ee6f9b127f03eada5fee578495c4ea53d89b6c978422c1534cd7809d9c4fe9d02760290ee8cd01c980a2b6a006179cf660dd150d86ec
SSDEEP
3072:f2RWdNEp4Ls2j37x9TR8r8t6Fol+SxIs+2lBnVvwsu:f2RWdNEqge3t9i0XxV+2l/vwL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85f5bb34b589232de9344ef63bea10e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE