CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b32cab278b4da7f9404ea162e5375799_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b32cab278b4da7f9404ea162e5375799_JaffaCakes118
Size
104KB
MD5
b32cab278b4da7f9404ea162e5375799
SHA1
933db67098a5bf34d3ad7828ae65ebf44671433e
SHA256
95eb95136defed5b2cb1798c48c0b4b51337de7d18f8c52d97b365ab6ac79dad
SHA512
230be33551d7c3c858478e8cce83602caf970fb82dabd9c9740e2a2876ccc6fd3e398034fa8d46494350100934ba043d2103e61063820815b063d2366509cd96
SSDEEP
3072:QP9hwdmPnWG7+ipASJ8Oe59JHwZAIjHEy5:Y9ydmOG7+ipAxOk9wRZ5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b32cab278b4da7f9404ea162e5375799_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE