CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b3f1a8a81888f68e76eadacf474ed3b3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b3f1a8a81888f68e76eadacf474ed3b3_JaffaCakes118
Size
96KB
MD5
b3f1a8a81888f68e76eadacf474ed3b3
SHA1
acc389194255b2768417766a0f90d279eb5f9a3f
SHA256
54f1e630978ba546ac3f254b69542b021de9cd0ea11fa40c8eafe02635ebd3bf
SHA512
1a14d384c4a9e25ecdc456b1411213072051b854c8a334318f0bed2ab626fe35a98a60cbef3692d6c78cce62d06da60b8e72b807e8b7e973ac7a4fb901c0f460
SSDEEP
1536:SAVJ0mWeB/iU9v6zuh4KjDo3hKgWcyYlvLrksgIpyShKTVYKLE16SWN00d:zJ0mW8/i9G9jExX4ELrks3pRlkfSWJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b3f1a8a81888f68e76eadacf474ed3b3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE