CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f99735cfd78cc5cad4876901b1542b01_JaffaCakes118.dll
Resource
win7-20240704-en
Target
f99735cfd78cc5cad4876901b1542b01_JaffaCakes118
Size
121KB
MD5
f99735cfd78cc5cad4876901b1542b01
SHA1
3b5d3e509fb668d4e6da92b8f6ba5ceb6a422135
SHA256
1f30b595fa5b9d6e3a6faefba40f938f25d8a7d49081bbc09070d583fc0c54b3
SHA512
c0ccf75db239e2ad15cabf20e3a0f2d7f7f88d33db3429e560e4d50349a5d848c1d2d49c06174d633e7a9eba0b385a3af6dfb9d59502fa4668b2af8f457a6da1
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJq62Q64jAWSCqOX8WEEhklGgaQpHdlR7:l9L1xm6hpbVcJQ6sKxOs5Ehkwga0dj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f99735cfd78cc5cad4876901b1542b01_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE