CancelDll
LoadDll
Behavioral task
behavioral1
Sample
94ef6c07ffd53009c558a9343b1b9887_JaffaCakes118.dll
Resource
win7-20240705-en
Target
94ef6c07ffd53009c558a9343b1b9887_JaffaCakes118
Size
128KB
MD5
94ef6c07ffd53009c558a9343b1b9887
SHA1
809929b4c1ffa5cf694c3e382bc3a3694c4639d8
SHA256
9cf5a2e94f378c6a206d6f0dcd7553b0920858a06f370314798f95593eff1ca6
SHA512
976ee5dc8e7fd199b923a64f608d89b2a559422e8c377fa45162ab74390717d19ce165852526e751f2dd5c0ac7806e8ea3213add61bc6cce874ec75c2dd6962e
SSDEEP
3072:l9L1xm6hpbVcA5Iq96juvtRNttW/12ReLr5g:hnhppl+q96j4NtOyc5g
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94ef6c07ffd53009c558a9343b1b9887_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE