CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b9d6e3a4218752e1bad62505fa20176f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b9d6e3a4218752e1bad62505fa20176f_JaffaCakes118
Size
116KB
MD5
b9d6e3a4218752e1bad62505fa20176f
SHA1
2bde3e69c7f1f91c764b58eb92352e37764305f2
SHA256
624be4817742202bf43a0e44085b5e5294f5481ac4783e5c1091438c047cad08
SHA512
c07a66c390f0099601ce6af1f0a5186905d6f50996fedb391369539c49fd58065434eb9e695768fbd58ca3cad296c89c00213af1a6bc9c3acebca868cff4efff
SSDEEP
1536:SQclh8MIwu5+oYbwHBBiJseIK2qPvMeU/bkU/MtMGTANm8avSxM0VXp:ahdIw/oYbmvKTMeU/b/Fo8m6xNZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9d6e3a4218752e1bad62505fa20176f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE