CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b58f6bcb5452f076a3de6d57dc9c7915_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b58f6bcb5452f076a3de6d57dc9c7915_JaffaCakes118
Size
2.1MB
MD5
b58f6bcb5452f076a3de6d57dc9c7915
SHA1
46b7ae223b0b806192e59860292ee1ed297e4041
SHA256
fae991baeacd9b59480cb17485542db775579bd8528fd52bfe6c10cc3d8fc5a3
SHA512
4cf6e8c3bddbb99cf5f7eaa946d0b7b43e3431f3d155c9867a100723a51ac8c3b50d6d7940cd6923cd91707f0fc938b10ed1e6214fcfb3c76bbb59e7792022b4
SSDEEP
1536:/fLHm2owFYV0bB+MvkWfBDM+hQ3wfNHFhvln0Ct0/UwH8NIOQ8Gfis:Tmhww0bB+dWflVQalhV0CuXOeqs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b58f6bcb5452f076a3de6d57dc9c7915_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE