CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b8750f19375fea9b2b9e94afc95c3930_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8750f19375fea9b2b9e94afc95c3930_JaffaCakes118
Size
75KB
MD5
b8750f19375fea9b2b9e94afc95c3930
SHA1
900e7df829fde5b391171d23bd9691e131a6355d
SHA256
11eb3add18d387027fc02d5284b279035bba76408b4bd986d400e99c3098bace
SHA512
c541bbeaac58d59f32818ff8204dad78626c381ddd4402954312dc09f9ab5eee567fd9d23e9860484fcb6bbf0af87ced10a77b044f320ced2d7be25cc32301a0
SSDEEP
768:qci1Lga1wVdpz/vApyNGC2wAfRtc7nzw07mzA0L1d/DNZ6PDNzEq3lqq/ETvGrQw:ugLdYo1z0zRP367tHUq+vGrO2mX37ve
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8750f19375fea9b2b9e94afc95c3930_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE