CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b507e1451ddc085990d2b84d8e568931_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b507e1451ddc085990d2b84d8e568931_JaffaCakes118
Size
83KB
MD5
b507e1451ddc085990d2b84d8e568931
SHA1
08d8a552510dea1e33f203e4e03c2e24f27d62b3
SHA256
271f027b1d39c7012acfb26339e19e8c1e2f0e103d77f499d5386c8280f9fa2f
SHA512
d9f2daa5af16ac71c88fbaff6da8626f9afcb957dd9c918f942447112f34584b0920ff7f148e5f92a22cd5acf8678f2af80f7199d2c876e247aae8a3c4f79b1a
SSDEEP
1536:SM9jsxvhBfnHsYjq3debh7unCRFwXdHR/DcTNAn3l/94:3jsxvfHjYdeb1gXdHR7eA35C
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b507e1451ddc085990d2b84d8e568931_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE