CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c16e96ea417c18ff03fc65c281db4b8c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c16e96ea417c18ff03fc65c281db4b8c_JaffaCakes118
Size
140KB
MD5
c16e96ea417c18ff03fc65c281db4b8c
SHA1
e25ed2c11ef29722d58cf8e36a536069aa769a14
SHA256
e70b8944f00f8d428b96504f6c15eea2ed4558398a5d90f88411eb46e7fce375
SHA512
c49065a8eb28ae927f16265c856c09b3b5b8400efb3c89068f76c99c658ad547c598fed429a510d5051ca35e0303dd4c329712dfb351a4f636ac13b39ffc7460
SSDEEP
1536:MDEFUawhF/H8fOHU8501c7AqUpdTsyqFa8wItwP+R2bMQH:j4D/cr8e1c7ah3qQ8wqZR2VH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c16e96ea417c18ff03fc65c281db4b8c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE