CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b624c7ecce85c551f752312993b84caa_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b624c7ecce85c551f752312993b84caa_JaffaCakes118
Size
87KB
MD5
b624c7ecce85c551f752312993b84caa
SHA1
3687e6230bcdee18a08967f25059a280aa4cf425
SHA256
3e7e05130dfb9af4370c9edd22672a7d4ace37abd2cbae30babc9a6e3cb338b0
SHA512
8a674103ebe1947ff5f5924e286e36706a1e6d9ae7a12048b18dbca37a8cf2a5a50165682ff328a559784a5c24c92161fd3ec39a7c874950143fdb6a0e4c450e
SSDEEP
1536:qWNTI2j7IGPmy5guIRpBVafPSYQbYUeGvCZ5//0jM:qWNTHTey5HCbVaXSvb13aZ5H0g
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b624c7ecce85c551f752312993b84caa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE