CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b420f9f7aa5d90434f47dfd55b4734f2_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b420f9f7aa5d90434f47dfd55b4734f2_JaffaCakes118
Size
105KB
MD5
b420f9f7aa5d90434f47dfd55b4734f2
SHA1
fc3397457eac81fae7671fdce1d1e1182834bc31
SHA256
6df8baa042b3d2254ade1abd0c363ad1aebb66c9456973a978d2252e109ffd72
SHA512
b34f635a13bcda2456359b5029dacbbb7aacd81a2e79520902c879a997c6392bc56c18421a41c8908402a1d38a9186b6dcebfa9f95a121b0f02c85776dca8fab
SSDEEP
1536:J3iyDPFw2bprmjSv4B0Ip9X2NvjGNjJ0HEMF4PBcIlND5Mv9lDHIPlH1f3:1Tw2bpCuv4Brp9IGRLM6PBplVSrIp1f3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b420f9f7aa5d90434f47dfd55b4734f2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE