CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b2ee221f8aab4ee61ebe8903626096f3_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b2ee221f8aab4ee61ebe8903626096f3_JaffaCakes118
Size
86KB
MD5
b2ee221f8aab4ee61ebe8903626096f3
SHA1
c7b4599195b503c445420357f456b184585503f3
SHA256
48a83665276a4a291b611f7f49d3fed4fc985768ceb5cf8c3fb97adbe9fe8d1b
SHA512
cf548c6fcf0e38062b041c9273a97a5aece0216b8ed6f6a4d110ddcd0a632d38c5a8d789a8622c4c10592b714b59ca49b156940c8b8d28696eecc54a8060fcea
SSDEEP
1536:/xLK2OReR3CHaQhyG+A3wlKDkN2biM0OT:ZVOReRyHnyG+A3RO2biMX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b2ee221f8aab4ee61ebe8903626096f3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE