CancelDll
LoadDll
Behavioral task
behavioral1
Sample
892301468c5d4584144881f6a0a2ffcc_JaffaCakes118.dll
Resource
win7-20240729-en
Target
892301468c5d4584144881f6a0a2ffcc_JaffaCakes118
Size
99KB
MD5
892301468c5d4584144881f6a0a2ffcc
SHA1
fc832429d3e45087268f56146a5e1fb650830ae0
SHA256
17f89777676e8201def489d12eeef2092e628a1e086ad8ee638001f02be3f787
SHA512
47440a005b38b1b8037fd42d4c71997a30e7030a04edc4a7fd26dec450fdab8fe1a6a4b6aa8015e2725a5ac3ccf0c175cbdc89d3712ba6677af4efac81b4756c
SSDEEP
3072:1SoB/67NlPWvs80X74qM0wM/hxqACBMpV+M:17ivPWvgL4awM/hIAkaoM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
892301468c5d4584144881f6a0a2ffcc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE