CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cf3af7c883da65b77d57d72834616a37_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf3af7c883da65b77d57d72834616a37_JaffaCakes118
Size
90KB
MD5
cf3af7c883da65b77d57d72834616a37
SHA1
9aeea762dbe96652cce8a1bd964d16712f4de72d
SHA256
5b4e19de073a47cf29a23835f3b8e5798f238e21a8716201873b6580b091a534
SHA512
5ec2eaf4b86c8c1866a6c6a9945af941480997b7816edb7e6f1da6690ead190428d649d08f904b6ec56b8d0fa9ecd022ee2add2a90a5e7518cc6e6040a4facf6
SSDEEP
1536:pySXN/9GhFgVhQgN4+pa//fg3vcqFYkBU7PjysmxiiHllrQ8n:pymhYhCqgNzpfc7kBUbjysm88b
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf3af7c883da65b77d57d72834616a37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE