CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fe4728d2318873d6e69afde320d84939_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fe4728d2318873d6e69afde320d84939_JaffaCakes118
Size
88KB
MD5
fe4728d2318873d6e69afde320d84939
SHA1
be880d118ab07f8e73fa5e2ba069f4a0c8e8c50f
SHA256
935d7e3bd3dcb1a22cc8e21f63ce7f0fabfbc0864fa30977882fff7316da9d89
SHA512
82f2e482dd3b054d82bd342a1a01da193558ecca2e4dc666ecc45feaf7f6038c467b739081eae283a1b241911968e2906c3f6e2409385e2b5e2fc04d747bede8
SSDEEP
1536:SAVJ0mWeB/iU9rCIqv8wy0EsiOTpTiQ5sXWeHdp7XfOTtM9K6pO:zJ0mW8/imCIqv8D0Es9pB2j9pbfOTtMo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fe4728d2318873d6e69afde320d84939_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE