CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b28afb31f6b90c8c69f19ed6bf5b45b8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b28afb31f6b90c8c69f19ed6bf5b45b8_JaffaCakes118
Size
123KB
MD5
b28afb31f6b90c8c69f19ed6bf5b45b8
SHA1
59a6702492762182453e57465e05efe9d1fa2c11
SHA256
0a663570b698b4b7d0f9946a955b30bb8c3d51e4ccc677cefe7ca70bb1bd2107
SHA512
aa82ac9b220ef84174bc568b555a00164374451f99ab431586b6f08feadf2bab0c5dcbe89d3b397e1f8f75ecd4887b7f75ae8c479646cde9d7da60fb4e09feb4
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqrUcF+c+OVAxYCUbW0rkwuuwhO2omd:l9L1xm6hpbVcrrwcx++CKgaE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b28afb31f6b90c8c69f19ed6bf5b45b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE