CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b589b2e24a60873360c74e0ec93bf857_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b589b2e24a60873360c74e0ec93bf857_JaffaCakes118
Size
2.1MB
MD5
b589b2e24a60873360c74e0ec93bf857
SHA1
55ebb32a49d7bf27928f8ece24ef84013bfcad9f
SHA256
22666e6fafcff18bb519a8727b0d7836bfa903bae8496d2fbd76cde0b88d54f6
SHA512
2e0cee2c941654370f703cef9d019a146a3a6c2f64fba5012905aa65072b59dbbe0253daa82ec01e09fc3456a24b72b22eafae1e90d09f12f1df0b813a62857c
SSDEEP
3072:Wvrhwea2T+leLvH0h5Ermom2472Rbu1SD7fIdayF1E2J:WvryX2TDv056n472Rr4ay02J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b589b2e24a60873360c74e0ec93bf857_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE