CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1422d23a73e8ee7e3c1c08ee2238fb5f_JaffaCakes118.dll
Resource
win7-20240729-en
Target
1422d23a73e8ee7e3c1c08ee2238fb5f_JaffaCakes118
Size
105KB
MD5
1422d23a73e8ee7e3c1c08ee2238fb5f
SHA1
79bea198f984cde563c85c4aeaf65e50b0aa2001
SHA256
8dcf818cfdefce39fe3c1e2d62de1e80a141ce0578f54725e18af2b4b1118a1d
SHA512
d13e4057f1f29a9ab3b5a7553fbe944e80dd8114a211da48354987be875456969b695ad586cdb060441ce6fb4b3c51bc7055957718047e43d60b586f4d93b15d
SSDEEP
1536:TD6K271gp7DXHQ49ATNHCqOJ3Zn3QjbAmizqcuv1jRI:TDGYLwwoNIJN3Qvv7z1jRI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1422d23a73e8ee7e3c1c08ee2238fb5f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE