CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be5bc10d47c9e9c3105024ee9f495f6f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
be5bc10d47c9e9c3105024ee9f495f6f_JaffaCakes118
Size
92KB
MD5
be5bc10d47c9e9c3105024ee9f495f6f
SHA1
8ac8cfc117115786228cb30afab0ce944e1d3fcb
SHA256
c1fd7777517819392d28f0d5acf6e222c6281f9ae34e4633b9d24e2271ad21a8
SHA512
234570f2b409a7e1956ca7581f28326da7673b3f045c910c30d9286dcd841e07b26d192d00415d5ab9ce3d3bd5c01d3e827d7f18420ffcf15e80e3e1e37065fa
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCJEt9tJ1MAdzU9iLSYPNnFVFrUWbfuWS:Ud5W8kw/jdt9YDJyCut9r1dJiYPNn/tQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be5bc10d47c9e9c3105024ee9f495f6f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE