CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b17c118b73d467cfe256a4cafaf01ecf_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b17c118b73d467cfe256a4cafaf01ecf_JaffaCakes118
Size
139KB
MD5
b17c118b73d467cfe256a4cafaf01ecf
SHA1
84f7d6e61569d2cdb27b3de252810504bc1165ac
SHA256
7921ac03debb04880d1d2930b0a3fcc6f48d3d818094909c93687f023df96547
SHA512
f79d5701bfd0b2b518f125c05a517703e3327a65f22c1dbd02888393a61113c4d321b69e6f75d5458b2fd8e3c8fa8726632c90e28ca7fa4afd7e2aac728cd8d4
SSDEEP
1536:MDEFUawhF/H8fOBpf1h6q+qgCEEPOE59WA7oAwWSg9QO:j4D/cU1h62E4zDWooAdR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b17c118b73d467cfe256a4cafaf01ecf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE