CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b25d8e70ab579d88b225f293de622d7c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b25d8e70ab579d88b225f293de622d7c_JaffaCakes118
Size
99KB
MD5
b25d8e70ab579d88b225f293de622d7c
SHA1
3820943c8338532ab96a46ded7b6039d11b0decc
SHA256
a762d6e2db1f7dbfd1980f8ed3b20f5ba2eef0a4bc7f4326f864790d3fadbb19
SHA512
34aadec9630f97ffd728adcbf3efb9d6d50cb29c1aa61334a2274c92c8abeeb45c97dd1f45333d1fd814eaf94cc0061525ed832ec5d5cf36d4e36bedc9675b8b
SSDEEP
1536:OVcGVEtjXCET3ZUI2mp97mSY/JgyaycYoUXJkyMOeiiy78f0Rm:Wc1jXTTpUDlSvyayc3oyOeFtf08
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b25d8e70ab579d88b225f293de622d7c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE