CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c244e542ad877c5977c369b5af906f0e_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c244e542ad877c5977c369b5af906f0e_JaffaCakes118
Size
107KB
MD5
c244e542ad877c5977c369b5af906f0e
SHA1
f6bcca6bdc74769f78e3cd29f944ee889e815deb
SHA256
a1e0fcd8ab89774a3d4139b6d48094a82495faad337e1fd7484043cc512be4fc
SHA512
c67e5a46765222c93404fee32a7c8a74247934e74439f443fa5cec591a9aeb7b9c47b0748d23290858e5cab5be9d377d569978df34117043fee00cdc2b624e21
SSDEEP
1536:Zn4Mi33LS7enDxBjRXI/dHuKHWRcwtwGAdM7ocrTu9E5dIuTq7GcvM98w:Zfi3b8enD39X2TWRcwtl7oITuCMuTAhw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c244e542ad877c5977c369b5af906f0e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE