CancelDll
LoadDll
Behavioral task
behavioral1
Sample
89de0254d5b2868b6565de415467bded_JaffaCakes118.dll
Resource
win7-20240729-en
Target
89de0254d5b2868b6565de415467bded_JaffaCakes118
Size
80KB
MD5
89de0254d5b2868b6565de415467bded
SHA1
29e92cc75bbfceee0cb2f2c3cee458280a92540e
SHA256
b6c3851ffc77d392819b72ef947e380be4064fcd11c813b6a8fc2b7a55453589
SHA512
7ce974fad9917e73977c2901eb019186c7cdc1c1e0769b0114b49902bfe6cea444c2fef937ced764949b435aa3c9e80753a636f0dd25cde220d6b55e3aeaa675
SSDEEP
1536:0SBGICmjXCTyBetAxHYq+wmmgD3Hk36ddRXUY:/BMmjXCoHYqmLD03qbB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
89de0254d5b2868b6565de415467bded_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE