CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b016b9abceb0ec5013e28ba5715d7b39_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b016b9abceb0ec5013e28ba5715d7b39_JaffaCakes118
Size
95KB
MD5
b016b9abceb0ec5013e28ba5715d7b39
SHA1
39b4ade21c566e6abd9893e19683b945b8101b5d
SHA256
e9b246f5a1e5fc264c49b36dc9ad52775bfcda91a65ed04984d2a908625edef6
SHA512
7536bfa6812db23d2489af50b6ba58542ece6af3da2112b808fefca0bfd938412288a2e8e39025815c8d3d50f16763ffb4f37ac585db9c9072c0e848ac52c5c0
SSDEEP
1536:kFjbtlR0g+Mv+vjrnc1MM8dURBIQbNxeFdJM4DaBbBb4n5ed:k1plR0g+MGvkMM8dURyQbXePPaBbZ45O
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b016b9abceb0ec5013e28ba5715d7b39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE