CancelDll
LoadDll
Behavioral task
behavioral1
Sample
969de980bf503a70118638e2c7dfef7d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
969de980bf503a70118638e2c7dfef7d_JaffaCakes118
Size
104KB
MD5
969de980bf503a70118638e2c7dfef7d
SHA1
19cb5d2920558b4ea28a02ffa510a64e94b90fbe
SHA256
cb46ef7c05d9f4206c1f469539938c57ad1ae1d1bd79e3691534f797810a5622
SHA512
7fe277c0c98076696d4d8b2a36d4411dc483ede2b9c59a3c2f3b8b17ea4070c73fd505f22aa351fa8420223b480ea812feafd3633a7ea31fbbbc5a5a8ebc8445
SSDEEP
3072:02RWdNEp4LsiuMPG8fTnKdRhjz2xHlzZMpn0Tk:02RWdNEqg+G8fLM3+In0Tk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
969de980bf503a70118638e2c7dfef7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE