CancelDll
LoadDll
Behavioral task
behavioral1
Sample
95ec1d18f2428fe38d41c3d19d7e349b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
95ec1d18f2428fe38d41c3d19d7e349b_JaffaCakes118
Size
97KB
MD5
95ec1d18f2428fe38d41c3d19d7e349b
SHA1
357627e7d6a614f9f0fdf3a5b51227825e29cc78
SHA256
92cb26db626281e05f931ec2f914f6ab5a9fa47f1efa542875efdc85640f0666
SHA512
1ebe319eb847fc9a7dc39f7dfffa082ba4f7f78d939208e3f57879b973d775a995bbd6da2c149712a5e72b157df8bed3342f664eb724d8b507ba99713d6516b1
SSDEEP
1536:i64W3b/+sHTUxLuRxDrEYK2jYwSIJZ7rJ/dQH9cq8tQP1:1b/+sH5FrocYwSu7rJVQHCq8Y1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
95ec1d18f2428fe38d41c3d19d7e349b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE