CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1489127c3f8c0ea34c403c265812a657_JaffaCakes118.dll
Resource
win7-20240903-en
Target
1489127c3f8c0ea34c403c265812a657_JaffaCakes118
Size
114KB
MD5
1489127c3f8c0ea34c403c265812a657
SHA1
ca461aa212c26e40a21ba30ec821dd6d932190fe
SHA256
828bfa0194f6c62779dad231d61171b5f6d10c22ba075b7f350833b8339c3a84
SHA512
04b486a06169d22fdd6164b84a8f09bb63ccac04e4649c78e926c41306ae526738fc5469be24ac265e2d9cb8a2f459a98549318c3bb88813db6a76fff3cae908
SSDEEP
1536:/ePxCUjeSp7qrnhBbgA6U7eLKezAjmisVFSdcS+Tre896t1X3zhLPa7imOd:WPxpuLhl6PMi1SG5D98tFLoimOd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1489127c3f8c0ea34c403c265812a657_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE