CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f500317ee2f935a2372bdca2c128d49d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f500317ee2f935a2372bdca2c128d49d_JaffaCakes118
Size
106KB
MD5
f500317ee2f935a2372bdca2c128d49d
SHA1
dd6ae712bc41463a26615e07d019d33f9d432777
SHA256
2b2f710c7084cc2a267ee6ed634fafb84a0bdb16dc70437178bfbe4865eb2824
SHA512
91563edc1557a960162bb31aa47ec8c974a82726f10c8f86c167bf8c193aa587f49abecaf75930a010b58098f32ab94202bdc7e81d9920ae382d8ee5eb9845b1
SSDEEP
3072:LmFty1L8gDyOKloPh95zSjB925KL5nvYEqa4kZ:LUty1FyzloPh9ojSQL1vqaDZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f500317ee2f935a2372bdca2c128d49d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE