CancelDll
LoadDll
Behavioral task
behavioral1
Sample
274be78e7285099dfe7443660eaa4459_JaffaCakes118.dll
Resource
win7-20240903-en
Target
274be78e7285099dfe7443660eaa4459_JaffaCakes118
Size
110KB
MD5
274be78e7285099dfe7443660eaa4459
SHA1
957753b5875b3e668124c13f39c7230710f52111
SHA256
f53e1fc2cc64b2a44ffd917f0aa8c5e3e34a29ff3f52b1a5ff979362a8d2417c
SHA512
06b384a5f7bc04b2012985da02d262fb851b0cbaf64a32f7d346eb245109d9d70f2f4afeaa291e1a07ccf94dae981abae5438f63cb4228340cdfbcfc936eb61f
SSDEEP
3072:f2RWdNEp4Ls2KGBBXoqTON9kNo2Re2DqTx:f2RWdNEqgNGX4WwkNfRe2DWx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
274be78e7285099dfe7443660eaa4459_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE