CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c04966c66c5990a8e06d2b662c282bbf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c04966c66c5990a8e06d2b662c282bbf_JaffaCakes118
Size
90KB
MD5
c04966c66c5990a8e06d2b662c282bbf
SHA1
d8d2d7b664d268f172e5f0f2c46c33f6c58afca3
SHA256
fd80bf9b245729f1957df134b7eb660e5e1dea11ecc72b4e3df94fc048193eeb
SHA512
f507b730371faf6ed3efba35ae30cc64e39458f077d73e1119c358ca27f5f1e822fa4ce14b53487af878614a0af637c4f63b4e76d940169245fc4eb7acdae2ec
SSDEEP
1536:A3/bBBnYanemz8rFz4rKirtRLXH3iUtSLxNtlfwxRa/1FoZx1JOZ9:A3/bb3emz8rB4XiUtsNtufadIQZ9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c04966c66c5990a8e06d2b662c282bbf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE