CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b9686d843ccc8e8b6bb959205d72248f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b9686d843ccc8e8b6bb959205d72248f_JaffaCakes118
Size
96KB
MD5
b9686d843ccc8e8b6bb959205d72248f
SHA1
0d6dd2310565b63c4bc972e3a15ed3a37a968fb8
SHA256
ebdfd1cdb482353a47f4fe552836940425972a81c5746dca5c786b70910bc40f
SHA512
8d2098c5996d75cc827761449c73ce4481c6f1aace1752d2cd4d2a0b118b6247cfe694419e6015200e133ef68fddf4af23d80625167cf10169794b50a20d313e
SSDEEP
1536:TD6K271gp7DXHQ49AhwFY0RLlAz78WDxRLAFOIrufq:TDGYLwwUoY0RLlAH8WDUF2y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9686d843ccc8e8b6bb959205d72248f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE