CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b60c330ed185e55bffbcfaa742477136_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b60c330ed185e55bffbcfaa742477136_JaffaCakes118
Size
107KB
MD5
b60c330ed185e55bffbcfaa742477136
SHA1
423a9b70f576578b3a6603dcc71592f3cc4db5c4
SHA256
b69716afda8187acc358934453259a059381cccaa6ea9b079521baba2a5142d9
SHA512
2d14b229ff240a5b11dea1f503e2d0ae65cb5ad0db0bc48b53841b2f04816615e50bb5de4e5be090b070389d1c11236f09e505b92cecd05785cf6618ff7708e3
SSDEEP
1536:0pstl9F0gv/r7r2ZD0VjpNiozZPKEKkVtPxsaldAVUpaff0lwv:0OtFNv/r7r0D0VjWGZNtpsqdAuMH0ev
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b60c330ed185e55bffbcfaa742477136_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE