CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b7a88fc3ff88975e023c494ffa08f528_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b7a88fc3ff88975e023c494ffa08f528_JaffaCakes118
Size
98KB
MD5
b7a88fc3ff88975e023c494ffa08f528
SHA1
ad3e6eec0618b6453d387f7bc2f90865a2385f1b
SHA256
052963dbb4f8f23a91b53c6610f961fadc33971920dcd5eff35767956a0df64b
SHA512
c2def90318d417f6da36617307991b05ff062be588a2e5ad6c1c282ae1c6727029c9490388fb1e856e0a221fd88604910bc9697cbea3356cf1831630a527af6c
SSDEEP
1536:jpSyrn1CZZV1ErUuXippOKFrhpTt9sXm6Y0g1yEB+a8gRcihaEMtBD8gYF:gyLSzErUuy6K9hltim6Y0zXcF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b7a88fc3ff88975e023c494ffa08f528_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE