CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c7ec03699bd04ad94262b402aa903989_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c7ec03699bd04ad94262b402aa903989_JaffaCakes118
Size
107KB
MD5
c7ec03699bd04ad94262b402aa903989
SHA1
68059bf0515064ffdeea32f880bc055e8a3af37f
SHA256
9439ee115096eef6e88f9aceb44832249dfe7d40e31303b34055ea03bbf62476
SHA512
73dd511caf427b3f8658248f9a96a2447330e782a621687b0ee7f29f60d3fb870e2e762016069361ae58b6c25751a3fd9a3dc1190285f7fd2ed5ed31d115498a
SSDEEP
1536:/xLK2OReR3CHk+WMhdaodFsWhCHFDN7NzJUmf93Y5xSW4AOy:ZVOReRyHk+Pck7sFLdV3IA0Oy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c7ec03699bd04ad94262b402aa903989_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE