CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b01db182b18020b327a972978b280fcf_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b01db182b18020b327a972978b280fcf_JaffaCakes118
Size
121KB
MD5
b01db182b18020b327a972978b280fcf
SHA1
3dd14f5425ddb099a275ef25502c614b3c5daa59
SHA256
0cae6b14546ce5c127f5307e13b807bc286316736d8a32fc6b6579f49a19611c
SHA512
46d820ec5d1c201efac218d096377287b7d1e35ce5bfd29e9217e91fb3f8521a579f6107aac32a6c2b25907f3321024604a0eb15472840fbc15ab007d25f6885
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqIkEHqGc0RC7Zc7mPvECbWGxa8zUUDNb7T9:l9L1xm6hpbVcXEDrgciUCSz8zUUDN/T9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b01db182b18020b327a972978b280fcf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE