CancelDll
LoadDll
Behavioral task
behavioral1
Sample
85fd3e0c03575171e5e1dc526c7691b9_JaffaCakes118.dll
Resource
win7-20240729-en
Target
85fd3e0c03575171e5e1dc526c7691b9_JaffaCakes118
Size
99KB
MD5
85fd3e0c03575171e5e1dc526c7691b9
SHA1
1a4088bd1f2f64658a80748b407790b89acb8621
SHA256
c8535108c979a29bf5e28161d704554be614cd7feec5c88221ba1b44783324c1
SHA512
1547ec66a9c07830a722ec20ab4afe53d1e6e941abfbd02ab8dfd188dd89e2ab71b6b5d037b95a1ef424985a24ac4972287f7f567d93e16dcf5a51b9a1d35199
SSDEEP
1536:/xLK2OReR3CHe80fex9zBHjJMinRzCjOoowVdDWw4uoM9+X:ZVOReRyHV0fex9NDJM4RzCjVn+u5+X
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
85fd3e0c03575171e5e1dc526c7691b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE