CancelDll
LoadDll
Behavioral task
behavioral1
Sample
868557230fdf6d4ab27ddc813116bf31_JaffaCakes118.dll
Resource
win7-20240705-en
Target
868557230fdf6d4ab27ddc813116bf31_JaffaCakes118
Size
106KB
MD5
868557230fdf6d4ab27ddc813116bf31
SHA1
dbe39fa009ac3e63231be74bb28bfdc06a4a3202
SHA256
b03776c6a2e341a3dc67587536fc40ca0e427a56b9beabb2861d090b49282f0b
SHA512
d23863d1e0c459c990ca66c39a7e43e3b76544dd1abe7024826054fb728c5c42231a441613a793025661f22c68aedd00f51b4522902ccbcc155a2b7bfc6e35fa
SSDEEP
1536:/xLK2OReR3CHeLkWXIuelWiu6bA2WQXfR236GxdXOT961TJ94MD3b3goQ:ZVOReRyHedXIxt7Z236GXXOQFMY3b3i
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
868557230fdf6d4ab27ddc813116bf31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE