CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b680c77a7759da786837c4a6047cf046_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b680c77a7759da786837c4a6047cf046_JaffaCakes118
Size
81KB
MD5
b680c77a7759da786837c4a6047cf046
SHA1
6c79effac8a2fea055c5cbfd8a1abf6114a3814a
SHA256
db862180c6a21760c3fd3129fce4b19a083a163f1c85bfc6aca08a5184be9b71
SHA512
f31603c013eff192b924551634a420cff398bb0e3d82ffdcc157fb36726dc8f6eae5cc5e8869624a4d29e6b99e8a86dda64206f059ba16c6d1404a12bf0615ad
SSDEEP
1536:LmSQNbJE1vj8gDxkOGvZA3zOecx5Cl+zXpzkgz1CY94HJ:LmFty1L8gDyOG+cfgoB1x4p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b680c77a7759da786837c4a6047cf046_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE