CancelDll
LoadDll
Behavioral task
behavioral1
Sample
94706de844d0806d6add5d0f1356812d_JaffaCakes118.dll
Resource
win7-20240729-en
Target
94706de844d0806d6add5d0f1356812d_JaffaCakes118
Size
105KB
MD5
94706de844d0806d6add5d0f1356812d
SHA1
bf7407c5a85ab69aca5c4c9e32c8eea5d514f0b5
SHA256
5e7c76e3c6ee7a6ac209fab821d13fece60cf4df3c9c6a4bf955640b8c5f3c20
SHA512
d6089740ac6666b74d26392a7cfc78eabe1f7234e606b541626d1c01bd54451d1905833ec3fd8a21c6b12738ea9d2fd979d065fa3616e11e0a5d3b447a213368
SSDEEP
1536:QPHd2owFn+G5mAGHnWauKrmMg2lVIUO3wY+6fbFWF/RRt5eZ:QP9hwdmPnWFBfK/d5eZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
94706de844d0806d6add5d0f1356812d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE