CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c93318297b8bc59ff533125839141519_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c93318297b8bc59ff533125839141519_JaffaCakes118
Size
94KB
MD5
c93318297b8bc59ff533125839141519
SHA1
3baeff5c2792a2edc39f51efbfe61df2f331f5ba
SHA256
48d3d8bd77d80e5b72ae5d6c7eb660ccf7770c40da0db52a5dfbc65bc586d355
SHA512
1b9e9abd67307727c60c9b83df8f595b1e8da4774c51866373abab02ad57a558d2f6cb87ae8c0764616ec5e08bdf33f856804e514cb07a601340217cd738bf0d
SSDEEP
1536:jpSyrn1CZZV1ErUuXippOBsrg+LdJ4c+OE5d5nwbhpKSOBW9EkjH6k:gyLSzErUuy6KkJOE5ddwbHKjBw2k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c93318297b8bc59ff533125839141519_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE