CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b3befa7f38b8ff8027ce01e320f8564f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b3befa7f38b8ff8027ce01e320f8564f_JaffaCakes118
Size
108KB
MD5
b3befa7f38b8ff8027ce01e320f8564f
SHA1
28a96c6c804e199e2a83522fb6a5b224825adf94
SHA256
31de306753ff22c70f01e7f9a4e7d9e7d136f889b2dc4c0d5f6765d347b34296
SHA512
bea842180edc7df9af62b4a95f36d7d91b4532c1d46077a147e9f1e57d18ed9bed1aefd6f55b5b36a492dcf27ad14dc76bfb840067cebbe58a930dbe437349b4
SSDEEP
3072:FbmhoODfUzGMUnfEMuTOw/3BLz4LjjZAIff8W+o:FybIUfxuyc3+jqIff8WP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b3befa7f38b8ff8027ce01e320f8564f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE