CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b17bf67034ee199eda9c750fb9be4881_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b17bf67034ee199eda9c750fb9be4881_JaffaCakes118
Size
141KB
MD5
b17bf67034ee199eda9c750fb9be4881
SHA1
06d08800b7babb9b4830db11872f7bfad7880b74
SHA256
524a6d25b290b2251357930d695498485ed67805580522f8b46619c5a2935b5b
SHA512
4e190fef7449739ed622819f12d3f7e779f5db0321b9159f4b5e30145798945156f5421e38f9cee9ff0409898b8744741e6d0218a51d2e8122b2901b06126b9a
SSDEEP
1536:6Rw9k6k1FrHc5DmUM15ZL2c50LvsyAgD8o+ObZqCVuRBV82A8Tf6n9AP:/cHr8Bnc53RDo+O1tuRfi8enuP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b17bf67034ee199eda9c750fb9be4881_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE