CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a3b7ffe78c896427422b862bb4519345_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a3b7ffe78c896427422b862bb4519345_JaffaCakes118
Size
113KB
MD5
a3b7ffe78c896427422b862bb4519345
SHA1
b4c7ef36914958a945ff3503e3f20f7a897d4924
SHA256
6dea25ccabc956e5605f6db8dcc9f7c90321d2d5098f570a41e42277b7b37250
SHA512
f6d1f95ac0651ff7b8617936c9ef037bfdb538c4d18bcf837e080aff3df5fd38036a2bdfdbed0d6d9b0826aabc179beea1063ab9f7913411595711ece0c911ff
SSDEEP
3072:0OtFNv/r7r0/3LP8DLp2HXdBKV1RieF4f:0Otbj74YD92Ht8VTF4f
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a3b7ffe78c896427422b862bb4519345_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE