CancelDll
LoadDll
Behavioral task
behavioral1
Sample
863ad6d482556962a21ba1863f47c98c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
863ad6d482556962a21ba1863f47c98c_JaffaCakes118
Size
103KB
MD5
863ad6d482556962a21ba1863f47c98c
SHA1
d4ea34c691df3f3483e1ab9485ee6de2c82161b4
SHA256
afb1c1a1a8ec45e8e6c4397a6d0f6c9c80641bc437f1923414ee921035791604
SHA512
decd050babd2559427580060efe33633e4dc47b9b76fa961b375b4a6267e36220418aa8888d80a1dade28b82c079c68b31f56318d705517e537b918bb9f0a23f
SSDEEP
3072:3jsxvQ46xAhLpWQBEvQ44vZj4D701PdEI4S:wv+xQLMRvQ44hj4D701PdEID
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
863ad6d482556962a21ba1863f47c98c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE