CancelDll
LoadDll
Behavioral task
behavioral1
Sample
efbd234038d1504f41ec165843053d1b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
efbd234038d1504f41ec165843053d1b_JaffaCakes118
Size
95KB
MD5
efbd234038d1504f41ec165843053d1b
SHA1
9de7da3d43a28617d04c5de8b75674e7f3fd26f5
SHA256
4d835366d474e91a74943949c9478921db40fc93494205155bd068f22c80b4dc
SHA512
f969b2601b2b5e5aed480b5eaa5f26510fe1a73d263f5cc34f6371704d7461f3ed777f5ad332171998d84d39445cffb96ffe2d9a1563325d2dba8f6be6913f2a
SSDEEP
1536:j/7tY+plsUPpUb+ZLU0/FwkgxL+byeSJ+aBkKZ7B7avto78M2y35gBPMk:jDW+plsUwoLU0tBcLqgJDaKT+67r2y1k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
efbd234038d1504f41ec165843053d1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE