CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be759863a3c0e6db63885e266b036639_JaffaCakes118.dll
Resource
win7-20240708-en
Target
be759863a3c0e6db63885e266b036639_JaffaCakes118
Size
99KB
MD5
be759863a3c0e6db63885e266b036639
SHA1
b96994ff40eea6ae66df427c1aa6eafd00ca2f37
SHA256
fb09bfe53a955de79c473975f7066cf7837faa1d16e4c11085112177727e0b94
SHA512
83731652d8ce5dd8f7c679d0762de8e74ab868de29feb2fecc04833a8f00dd08d1f242c7d24493b66996bed84d183ede855d4dacb6baf961593e78a4a2c32bcd
SSDEEP
1536:YXHoPktJDJg52W0IepPMk6LKjGtjmGccSlY0szMjQ5GNLsFS8KnRMzdv9H:cftJCL0IepPdbjGJuXszME0l+9KnCZt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be759863a3c0e6db63885e266b036639_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE