CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9662d56a0dd2e1094983d1eda6834294_JaffaCakes118.dll
Resource
win7-20240705-en
Target
9662d56a0dd2e1094983d1eda6834294_JaffaCakes118
Size
91KB
MD5
9662d56a0dd2e1094983d1eda6834294
SHA1
fb2c336d33e923f226399c895ce89cbc63b85702
SHA256
b4891355dd11739f10c225ec31cf38d5620b44218203b51714cdb3b91fd3d8e2
SHA512
52163201c8c2237780acc11f7d1ce312881578adc845da3cf2847e5ba1b1f0305a8409d4c988ee548c4cd12651980d131917903a81c94fe166c20f8485839900
SSDEEP
1536:TD6K271gp7DXHQ49ANsdk0/sIiNWjDflkdbBkRNilITx:TDGYLwwlkmHPlAONcITx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9662d56a0dd2e1094983d1eda6834294_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE