CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b1449e4147597987a4d536c223b21ba5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b1449e4147597987a4d536c223b21ba5_JaffaCakes118
Size
102KB
MD5
b1449e4147597987a4d536c223b21ba5
SHA1
fba84519075e847b51d60e0d376a32c13b573f17
SHA256
c5116e9c6d20dbc44b37e76e14deec8a4eaee1be79422bf24a6e904449f87825
SHA512
05519143a6431eef5b7e1a0f02e2ab43f8dd5e59e52c953482c03e69fa9acee93bd0baebdee89e0324c808533cd354e62efce1c3f0b1584a2645c5cdd3320d46
SSDEEP
1536:i64W3b/+sHTUxLumxBaodbZLzgimL4C1jsTN5+FzsHjCTvJ39T:1b/+sHeXaoMXLLjsR50z22TR39T
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b1449e4147597987a4d536c223b21ba5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE