CancelDll
LoadDll
Behavioral task
behavioral1
Sample
283b3c0d6cfb8525c5d038b63c2290aa_JaffaCakes118.dll
Resource
win7-20240903-en
Target
283b3c0d6cfb8525c5d038b63c2290aa_JaffaCakes118
Size
95KB
MD5
283b3c0d6cfb8525c5d038b63c2290aa
SHA1
0e274e2f406d2f030fcfd092e9b3c977961325f8
SHA256
58c19f3d011c3b413bab74785f008ff6b6477a7dfe815705153697748ac27239
SHA512
56e579449920a7a21232933f564fea03e006cd075ba6d16819daa40e1d85f5668cafbd96b3652b34d2454cde96ac08c0ca6e202381c9ae35538c815604d085f2
SSDEEP
1536:rVGqeHHrjdj9xcNK+I0L8WnuaGoiNUmJwI2tfBfscslfwpdhgje4g:rKLjdjLcNKx0Hnsx+mKIgRscslfShgjQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
283b3c0d6cfb8525c5d038b63c2290aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE