CancelDll
LoadDll
Behavioral task
behavioral1
Sample
94190ad965d78a400ba2926650f6a55e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
94190ad965d78a400ba2926650f6a55e_JaffaCakes118
Size
94KB
MD5
94190ad965d78a400ba2926650f6a55e
SHA1
f6ad25ee4a1adcfe7c165908e3a4b6f60ae93382
SHA256
854e76c5a7eb9c24abb4f36be93a3d7199f5a896e4d30520dbe80a807d75390b
SHA512
e122c4d4071f8c888ec47a739a838c509280afccd81332d666517550460c9d6c96fe3385fe3733fea18a681467d298960f7d9c1d698e288168c70f922c7f44c1
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8USIhCzrSptLYKw/1K0xrE4DlIADTa:FfUxhDtZp8vIdCFUjiSpt8KMPDlZq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94190ad965d78a400ba2926650f6a55e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE