CancelDll
LoadDll
Behavioral task
behavioral1
Sample
966b07a11adced85b2e055929265931f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
966b07a11adced85b2e055929265931f_JaffaCakes118
Size
89KB
MD5
966b07a11adced85b2e055929265931f
SHA1
7ae17f1b7bfaadcf7ad70484c3f5c8dfb1aea896
SHA256
86319204f5536025978f28944e3920ad4bbc1795047107192cc712a11f7ffbff
SHA512
02e54a24c7641e02a024b3ee46acc04f30f5b039d048bbc28215f8308ae0f368ab82ae0f2ea765b3c535142621ffcea2d010a2a99f648a7e1d8f52a3024f362e
SSDEEP
1536:MxvNbz0ZBTYCsRKkc6SuZ3YMQzlD21yHU4MzxS7ONMKhl:OB0BTYCsDhSRMQztlfMlS7Ot/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
966b07a11adced85b2e055929265931f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE