CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b4919676d38bcbb7c58b1e280a9f0986_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b4919676d38bcbb7c58b1e280a9f0986_JaffaCakes118
Size
99KB
MD5
b4919676d38bcbb7c58b1e280a9f0986
SHA1
bf5b811079c09d432111bce42a8de7c11a518de9
SHA256
43ad8c810734e3c26822fcf66d3dcb54398c6e6717fe696e32fda172ac9d8f15
SHA512
3f0c03b3e6c17370c167f422db8d74359a3eb08600aeea2d5b7ee56a7a2d7b2aa0f52e865fb42d1398fbcabf06619b36438ea40a4b8f8dd5be8d36bf0b996cca
SSDEEP
1536:2moLIIWdNE9jv4LsBgI0bE7J4SOSNx6rdFpIhmN5QnKEZZVLtktO:f2RWdNEp4Ls2Fo7JvOISJpN5QVLtj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b4919676d38bcbb7c58b1e280a9f0986_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE