CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bda115c44752b1569036f9d962af1b6f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bda115c44752b1569036f9d962af1b6f_JaffaCakes118
Size
88KB
MD5
bda115c44752b1569036f9d962af1b6f
SHA1
f764b53f8d768214ab4f44a8b12d2686bad9ac48
SHA256
3cc5ad88e23cfa52709fa4414be0c7ed802d5a9680c98a2f359d16c82c6f2bd7
SHA512
0fc84d1d70935cbbfee288287b66d0f5d9e5fe1819cbb9d422a9a8a343642859290a5f390b1e34531ae3206edd92f7b0b73fbe22101ba08975b38ca7c353daa0
SSDEEP
1536:/xLK2OReR3CHJmQcC+d/OSX9VjDfRM8RZIuof:ZVOReRyH0DTXDZnTIuof
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bda115c44752b1569036f9d962af1b6f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE