CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f713b6da3464d947079beb0f0747a10f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
f713b6da3464d947079beb0f0747a10f_JaffaCakes118
Size
94KB
MD5
f713b6da3464d947079beb0f0747a10f
SHA1
7c4d1cc6f171f6490e4bcc726454325c7f36fb4d
SHA256
ed93b894b06a4875763c0ae4db75ca21ef8054149a4a2665d9c0a290849c5770
SHA512
181ac81b9843a1060a07197df6bd75b10875088df5350c4ea68bd9c0003480f50e53f9de1f3c4f533579e0367f4b9cf42e2b089b0b31a8502cf8d22dbd69a1dd
SSDEEP
1536:kFjbtlR0g+MgPUKKJuUPkRUfCgc6C1aRo7vXKBxJPWPE1C:k1plR0g+MgPcJh9lDojXKAPX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f713b6da3464d947079beb0f0747a10f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE