CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ba3f937dbb62853599f93d9b7ac4234c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ba3f937dbb62853599f93d9b7ac4234c_JaffaCakes118
Size
146KB
MD5
ba3f937dbb62853599f93d9b7ac4234c
SHA1
5bbc000116795f73083f4b1ea69604bdd97d4a68
SHA256
c622bd927c54b3f645e3f8cc7c2610c347e5fd1d015bd15dfa583d02519d70b4
SHA512
fa282c33c2407de4ee8e96db229e7af65dcb0d5a63f8cc4dc8ea9307fd378173efd03e18c4103c69fff73994d3ac5c904de0278cf99a8dcd391d9e38a83e0290
SSDEEP
1536:MDEFUawhF/H8fO5eJPA1ag0C9MTQIiS4S+MPPR7DZpzgYZ5/eQrHcPtey4ocX:j4D/cFY1ag0COsS7D3XNvrHetenocX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ba3f937dbb62853599f93d9b7ac4234c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE