CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bcb511c85f6934491a4ad7495fea0814_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcb511c85f6934491a4ad7495fea0814_JaffaCakes118
Size
95KB
MD5
bcb511c85f6934491a4ad7495fea0814
SHA1
53e104fb7343129e0c9a456265c8504b7f87457e
SHA256
ea9e2e31a172c87e53046308917f25be6925fe21dc7f9f8eff8336cb9a37932c
SHA512
9088240629a9bc599092b45b23bca10a875d0e7cf3627461d77ae6aa31de5f87ac0aec6bbd26ba7528b367ee4726b5b0d61a72eebefa2a6b04a332b1953019b4
SSDEEP
1536:7rOUbmJ/ZS8DDf1gqrULP8OWdqVqs+HHM9ScRtD8/9HQm89CxX:FbmhoODfaqrYTP9ZEzeW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcb511c85f6934491a4ad7495fea0814_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE