CancelDll
LoadDll
Behavioral task
behavioral1
Sample
85e6127d0f5f41812d5325748af41a32_JaffaCakes118.dll
Resource
win7-20240708-en
Target
85e6127d0f5f41812d5325748af41a32_JaffaCakes118
Size
98KB
MD5
85e6127d0f5f41812d5325748af41a32
SHA1
888c5c96cb06cdad52e174d4e72fc7e07365b8c7
SHA256
d3eb54dc477b513d5cf4ff71cb32f56a2475101c032de1dc87c8e148fcf12a6a
SHA512
503fb97fdad9d2e4639c4a05feb5ea76a9addb6c638f97361023c080223a93a97930e39eb7272494645c7fb6fba3e814acec3dc2dfebafce01d1d3505fbb9d4d
SSDEEP
1536:/xLK2OReR3CHK1FNLe+hGzQloiUKivBMKdeK5NShGQjWp7T8e:ZVOReRyHKjJGzLiUsX8ShGQjy7t
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85e6127d0f5f41812d5325748af41a32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE