CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b0fa06fabc8f4bbc8d6373ba649c0e47_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b0fa06fabc8f4bbc8d6373ba649c0e47_JaffaCakes118
Size
93KB
MD5
b0fa06fabc8f4bbc8d6373ba649c0e47
SHA1
753a9c5c4789f549135ba4ecd888fc2ea442b4e3
SHA256
524cd04613943a0b0c902912e27c7fd728944779fd46ba9d7f8d90881899c87f
SHA512
904efead0b472bbccd03b0044a64ee595e6841951e049110bcee363cef3629da77bb3b9ac950cee0ae421d1de67f72b82d4c42fbff9b63b2889193bfc81f39fe
SSDEEP
1536:Zy2owFYUhDDpYwVIY6QsiH3EHHFAM38wayTliYs6iUyyrlby:QhwSwDlYwefQsiXJM38wxTlOew
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b0fa06fabc8f4bbc8d6373ba649c0e47_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE