CancelDll
LoadDll
Behavioral task
behavioral1
Sample
add71a266b8aceb691ce30e987946670_JaffaCakes118.dll
Resource
win7-20240704-en
Target
add71a266b8aceb691ce30e987946670_JaffaCakes118
Size
101KB
MD5
add71a266b8aceb691ce30e987946670
SHA1
1e958fc8790b5b822cdd0fd9650cd04065a466a0
SHA256
1e79e2f465bd1debeb3cd05b7c14b729e803d9ea4c1a6e5d876da68127600a51
SHA512
076757001736392e2a798881d171a1db0d4de9ccf6fec145d5e336dae2631c80f7df53622ee4b89c233f1456f9bf2abef5a7d0caa198ce636b836d6100779b5e
SSDEEP
3072:u/2Y80yqRUV/M3wqPjlr/7PfJqMHyoJK7H:08gGV/41Pjlr/zJZds7H
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
add71a266b8aceb691ce30e987946670_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE