CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c7af2a0e6eb4458456c915a636e431fb_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c7af2a0e6eb4458456c915a636e431fb_JaffaCakes118
Size
6.4MB
MD5
c7af2a0e6eb4458456c915a636e431fb
SHA1
0d4d9af5f5514edf048b7956e7eb80c2788b0e56
SHA256
beb94f79ee4c9c6c86e29b8ebdb22f00e92a5338b2da0038fc110884d8bf2bb2
SHA512
dce146b8a801934b55474e5915919ff411b7d4c0b61903be87e094ff3381ae04913c865079828a612206edf296745dde6456279ef593772fc093f32c51939296
SSDEEP
1536:uQ/F0cA+F5RVGG2UKxXckmkpPRinNG9tv824rJdD3VlpKyr:uQsORVGG2NTmkpwG9V8jJdFLJr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c7af2a0e6eb4458456c915a636e431fb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE