CancelDll
LoadDll
Behavioral task
behavioral1
Sample
940f5264bf8e0c1812cf1e99c8e8b9c1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
940f5264bf8e0c1812cf1e99c8e8b9c1_JaffaCakes118
Size
100KB
MD5
940f5264bf8e0c1812cf1e99c8e8b9c1
SHA1
07eec93d1f84555b8908e7152668fe53ed4cabea
SHA256
8a27691de0a36e53de86d901faac54d9570719c6808a2bbfe980f36da38b60f9
SHA512
bc0d3c5160c09826aeb41546699ff633725bd655878e92c80ff70bcf470835a1df2e73826694fd5c15921ba65dda660d4b6385c89ea05efac199c5067493b227
SSDEEP
1536:Zn4Mi33LS7enDxBiQvcqPhdQqXFvgIjZ1JJ4WmcML5vd:Zfi3b8enD3bIqVvgSJ4W2l
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
940f5264bf8e0c1812cf1e99c8e8b9c1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE