CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b0d039df6b8f25b4ba1c8e5b589053aa_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b0d039df6b8f25b4ba1c8e5b589053aa_JaffaCakes118
Size
97KB
MD5
b0d039df6b8f25b4ba1c8e5b589053aa
SHA1
2728e6f9eaa7d0aac8511205c5c1d27bc2eb0724
SHA256
410935651c0ca9d98b327200a6e8138b1f54902a3f8fdf074ca4dc27e4d61341
SHA512
e6c426ff0da3bab00229de4ca3a6b5adbf06e8e72145cab2e407ee01680b5dafa289fe84791e6679223627e290ce6767d5eb69ef664f4ff49a9466740faec4f5
SSDEEP
1536:AnSIWWZU3mEoNtVw+6D4H/6pNfB/uI78kMtFIzKZG6ilwX4H5K:ZF3mEpD4f6LJ2ufMjp8wI5K
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b0d039df6b8f25b4ba1c8e5b589053aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE