CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b3b3ff90edbbad441f679430eba18d7b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b3b3ff90edbbad441f679430eba18d7b_JaffaCakes118
Size
107KB
MD5
b3b3ff90edbbad441f679430eba18d7b
SHA1
85f6a1f8608432dd3a7004e30014f75f63b62813
SHA256
4f553b6f5088376d5e96d73814a4627d6248db4200b2d707ed63402b14edb632
SHA512
9e6ea47aca99488d5837ffde8302b1948526418d16c0ab4ebb6adc5a6e4d44c10c9dc20c45b9499ea2db5833a8d8756b4489ce596cbb6409f1ec03fb88609d91
SSDEEP
1536:TD6K271gp7DXHQ49ARou4DNkzkU8hBqgnGXG0t6qW8+hVg:TDGYLwwUouQLjhBqgG2U6PE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b3b3ff90edbbad441f679430eba18d7b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE