CancelDll
LoadDll
Behavioral task
behavioral1
Sample
efe23599b6d3332a08f68c886d48094f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
efe23599b6d3332a08f68c886d48094f_JaffaCakes118
Size
104KB
MD5
efe23599b6d3332a08f68c886d48094f
SHA1
f8804987dc9b09fdbc7dc0bbda9ba7990301dae9
SHA256
8c07e7e83e5cb5605797e2c1819f3f9ee98b1f59fab2cb41004123dd5ce073cb
SHA512
c354c08d7c6ae7d1336cbff5deabd127ee549b59dccb72c18c51276af9b65b75cc3ae2861adf02d8932eeae6ee3e7f2927f526a8e85920682ae0f3675281e203
SSDEEP
1536:9iJJJXbJlTYTnkU32V4IEHSIGn/LUiEB68WbL+7tsJ11lKRHE5cgdLAA/X:cJvpYTnkU32maYiEx7tK1q7gP/X
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
efe23599b6d3332a08f68c886d48094f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE