CancelDll
LoadDll
Behavioral task
behavioral1
Sample
117093a91888738cc6e5dae90e67c027_JaffaCakes118.dll
Resource
win7-20240903-en
Target
117093a91888738cc6e5dae90e67c027_JaffaCakes118
Size
74KB
MD5
117093a91888738cc6e5dae90e67c027
SHA1
716c11994d71cd8c8dfc123690dbbdd8caa24cc1
SHA256
18c0dd4a8b88eba53fa36042463b7a8cea6d29f2e37b4940d26b0ef82af67aa1
SHA512
1b5a5059454b9c50449a8de714ea66275232bca981e9d2e158d220383713fdd3d88ae5513104ee758ca87406c74042c3a487d4fab4e9277881ff1cc3871ccf88
SSDEEP
1536:SAVJ0mWeB/iU9AYxVBTQUps6haJyocYDdr/:zJ0mW8/iDQLTFhaJLB/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
117093a91888738cc6e5dae90e67c027_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE