CancelDll
LoadDll
Behavioral task
behavioral1
Sample
874c3dbda8c39ff1f7877cb8805ddef0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
874c3dbda8c39ff1f7877cb8805ddef0_JaffaCakes118
Size
131KB
MD5
874c3dbda8c39ff1f7877cb8805ddef0
SHA1
000ffd126eb167b8775fd8b92da1276b0d1d5ecc
SHA256
6810d5b8d20062fd28653caf5fec3af5cca6e442f95108aa55a448842aa829c2
SHA512
77acfe64e129a5418bdd6467422b8df56608883fb719e590d8982998785244d86dbd87caf340d222934dac318d80937a5fa1833f95b31f6cd8be59d0221c96e2
SSDEEP
1536:IJrxM1wLW8DYcHcNRlzTQCXeKQ5vy7m5mH8YifsKA4nMxFpEr6zQgi:Ixm8DYqcHCwQ5FNYifu00Qgi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
874c3dbda8c39ff1f7877cb8805ddef0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE