CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0be3e969fb72d66f7265cba9735c29d0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0be3e969fb72d66f7265cba9735c29d0_JaffaCakes118
Size
89KB
MD5
0be3e969fb72d66f7265cba9735c29d0
SHA1
c58be368e3717a74673494ee508e43e2fe6498c0
SHA256
9f123d360c8841a599ae5e1c19827c3ea0ecdaa04a92826af0b304cd84602de9
SHA512
e12dfcf13c56891f9c36ef83f45bdec8482328e11eca4b57082f05ef05baaa266ad128eb50a07613df8add0bbf55705225dfed72ca6fa7fca3ddec27df2eda37
SSDEEP
1536:SQclh8MIwu5+oYY+sRe5bCKSm8DPHKYQLbl0:ahdIw/oYY+rpCKSlTHpqm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0be3e969fb72d66f7265cba9735c29d0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE