CancelDll
LoadDll
Behavioral task
behavioral1
Sample
beefe198ad08bee5a7e8dc826204e1f9_JaffaCakes118.dll
Resource
win7-20240705-en
Target
beefe198ad08bee5a7e8dc826204e1f9_JaffaCakes118
Size
102KB
MD5
beefe198ad08bee5a7e8dc826204e1f9
SHA1
b5f68f0853c504806e6c0ab0bacd3895a1ab185a
SHA256
dd500c3a07f7557ea31e6c51627a1e46328f02978f508cf0c65238e8fda8abdf
SHA512
b5043ce51924fec2e9c8f08c98cb949907ff63c3f075977205f7190db0080904e9930d4f2ce172760c290fd0330718c6b78c730582967ebc8b56381459b6d659
SSDEEP
1536:AnSIWWZU3mEonkopSpcsotOjAFh68H8HQfz8Gg125oPlpeyx0t/b:ZF3mEqUpcFtO8FhncHczDg3uyC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
beefe198ad08bee5a7e8dc826204e1f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE