CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c23b20761776a4d606097468dc0b0c61_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c23b20761776a4d606097468dc0b0c61_JaffaCakes118
Size
104KB
MD5
c23b20761776a4d606097468dc0b0c61
SHA1
49fbb9f1c1e0f6c1d9c44592596dc33d7f2ea010
SHA256
d354b8328e5e3e0c3c27c67a9a297edcea9049ea5ab2588c9bde02cd6d322caf
SHA512
b8885f6ca43bb690cb29590419adfb4e2b2a10170839158f66b7e7dcd239facc71512ab4f5e2b063c9873e2e72f1c2b13a37e18bc667f213834d8cf665fa57b0
SSDEEP
3072:Zfi3b8enD3GI0pW6E2L//y10h2iCSIsS0:Zfi3bZD3GIYW6EGC0Dn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c23b20761776a4d606097468dc0b0c61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE