CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a767948cc0c283ec848467416dda6b63_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a767948cc0c283ec848467416dda6b63_JaffaCakes118
Size
95KB
MD5
a767948cc0c283ec848467416dda6b63
SHA1
77318ad04547d96b3d48939199ad50eafb099b1b
SHA256
92fc5c0243fbbea1572c715536374f13b0ea6308ced7cd91fb3d2a5df58ae965
SHA512
b2bc57c4dfda80c6a23f0a81715197df77ec9855e053d709a3ed1097f05fd3d279d36a2d75f0ba232f62cd19feb46db2d6593b384f345a9867e3cfa8f7c88379
SSDEEP
1536:Zy2owFYUhDDpYwVIYvGLx6uh4ppS376M/dhsE6RNJAeTUY7K5kTJ3f+T:QhwSwDlYweA6x6JqLR/ruyih7K57
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a767948cc0c283ec848467416dda6b63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE