CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c885b73be88415b4033e7b22df62ee6b_JaffaCakes118.dll
Resource
win7-20240729-en
Target
c885b73be88415b4033e7b22df62ee6b_JaffaCakes118
Size
118KB
MD5
c885b73be88415b4033e7b22df62ee6b
SHA1
f7d16170f012cb0885c627091018d04d8c638a9b
SHA256
381661a288642b3d339a86fbe0ea9b8b78588d21e969e86c27d8e27819857b04
SHA512
5c1fd96f4ec3b8e7c3cf5303b1e697eca7f4cb9245cd4484ecfbb7de80942620c6d82d04b4658e182187ce146806239e57fdb88804b53e23d2a3a83b17ab8ab2
SSDEEP
1536:Zn4Mi33LS7enDxBciCZZ2Va0pEZj6cfg52im7rUxtVV6B+vGBzuIS9j:Zfi3b8enD3X3mZjhfRimsOMGJuIS9j
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c885b73be88415b4033e7b22df62ee6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE