CancelDll
LoadDll
Behavioral task
behavioral1
Sample
93a8bf1ed856e56895045ff401d9ff07_JaffaCakes118.dll
Resource
win7-20240704-en
Target
93a8bf1ed856e56895045ff401d9ff07_JaffaCakes118
Size
89KB
MD5
93a8bf1ed856e56895045ff401d9ff07
SHA1
d6136fd87fefc288cf6e077f350c99c0e643f50d
SHA256
a0e06bb6f0a406e36d21f87f562eb0f105f4f890788cd77c5739e68e9565c291
SHA512
9702f6cd5b5369f561e417186314640a3362144e7d00ee0fb0b6e44824b07d0b2fa0626b5c826fcf81854ad0b63d28c1cb53aeba0182e53606d319edcae0a919
SSDEEP
1536:i64W3b/+sHTUxLu8pW/gCLNIENi4qzPU9KQI:1b/+sHEkzLNhi4qzPU9K7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
93a8bf1ed856e56895045ff401d9ff07_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE