CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c98896800dbcbb7f3f17341f894f0d84_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c98896800dbcbb7f3f17341f894f0d84_JaffaCakes118
Size
128KB
MD5
c98896800dbcbb7f3f17341f894f0d84
SHA1
795843c39aa5e9d68174c8ed2e52acfed7ba9747
SHA256
12dcf49f71a607a43869f228e5cd197321c0546d34863d0e36f1ad77198f6041
SHA512
04e581823a722c797f8bad71b41bde110a7e5372c8bac266960ec0847d6f4a30978af5b414579a685dc1cc2b6c5d853b91d7e70544cf85c1e32623489938dbe5
SSDEEP
1536:MDEFUawhF/H8fOR2NvgzhpxtWMRwBncLg7OGdKmKQ:j4D/cI2atpxtWMRqczGYQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c98896800dbcbb7f3f17341f894f0d84_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE