mymain
nomain
Behavioral task
behavioral1
Sample
c0c134d742e85264b7e45fe662e65eee_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c0c134d742e85264b7e45fe662e65eee_JaffaCakes118
Size
30KB
MD5
c0c134d742e85264b7e45fe662e65eee
SHA1
32453ec1e6b212a02c648efb0fff7c0468ce2dc0
SHA256
1181abf8b26c565e950dc66ffd645034bcf634bb7e167f1ef2c84b746c0a707d
SHA512
3631eae0a6df6f0855e5493265adc85392ade7ad52e1ae14c76bb3d085436880753b2e6f65a44d308dd30564b7f61fb0d7da19bf3b0864a8c2775823fb14a1a4
SSDEEP
768:D7Kbafjo2EskwUtZa+uCOoghIvdVvJ4WbMWaSmQCxZekyUxEBctzA:D7UyjoJtkT5ozvJLbMaRCxMxqA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0c134d742e85264b7e45fe662e65eee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetModuleHandleA
LoadLibraryA
GetProcAddress
mymain
nomain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE