CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b521b02e4ddbd33e06969c4bd82f0960_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b521b02e4ddbd33e06969c4bd82f0960_JaffaCakes118
Size
95KB
MD5
b521b02e4ddbd33e06969c4bd82f0960
SHA1
b0537e13d27de20d47c62080741e5d4133fb4f50
SHA256
ae96e28e96990fe5e38357bd981604c67bf03c99374870712ef73a5a830c2c88
SHA512
98b0f972dbf83fb5c644c24f514a000fef04149ae5dd39a9ad0ab42f42d34031db4aae860fc2876b10af26b442167502d02bb9f44bb93f3a2efdbc12ecc17f79
SSDEEP
1536:i64W3b/+sHTUxLuhbkn3hykUx+Yoy1UsVyyXj7/oe:1b/+sHZadnYoya8j7ge
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b521b02e4ddbd33e06969c4bd82f0960_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE