CancelDll
LoadDll
Behavioral task
behavioral1
Sample
14f14a724911c408262014cf1202ec65_JaffaCakes118.dll
Resource
win7-20240903-en
Target
14f14a724911c408262014cf1202ec65_JaffaCakes118
Size
102KB
MD5
14f14a724911c408262014cf1202ec65
SHA1
7c768e340d1219cedaa7a093ec29d684619f61dd
SHA256
e3f914f2b599643c85f54192add9d3b36f1c1af32d9b3abf031c29bb54e13c9d
SHA512
07eb88ed74a0799ce92a9e2bb2a5f96bde2661d77fbe3fb2fa2df277e306c758906f6aadb962d582dc62f97db76cb378167573bcd5ed19f99c0cbf398a2dc241
SSDEEP
1536:zMHSIHT9yM8vKOo1JaQQtGeEpnLhkL4ilqqK/lf:z1QT0hvKOZmpn9kkh1R
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14f14a724911c408262014cf1202ec65_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE