CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ef42342f3f348787ced59831abd69267_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ef42342f3f348787ced59831abd69267_JaffaCakes118
Size
104KB
MD5
ef42342f3f348787ced59831abd69267
SHA1
e116b3059f535f34cd0071c8c53a3d8c9ce0a291
SHA256
e776cda0ae5584b52ae19fd55ba1f130d539310b3b2cab2cf3a5da6f0242ef7e
SHA512
6da083d93540b25f022ab576aa8531e15a68086130558a8007227bd243a9e9b4c936c786c4fd546b8d58ec36543019081e50bfa2a59dd872de673a0b709b3c86
SSDEEP
1536:TD6K271gp7DXHQ49AVjeMl7Tm5fJywlzJqhCZFpud5tDIAv/zQ:TDGYLwwujl7Up9MEEdQAc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef42342f3f348787ced59831abd69267_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE