CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2860aff9f182fda16578521eb089a742_JaffaCakes118.dll
Resource
win7-20240704-en
Target
2860aff9f182fda16578521eb089a742_JaffaCakes118
Size
76KB
MD5
2860aff9f182fda16578521eb089a742
SHA1
88089516995f71cf87da3f5f063983ac13cb5923
SHA256
8d2ea1dc5488467eb368071c4346f98d3b1e3f10423ad2cbaeef226934e498df
SHA512
3244a9fdb46290a9a1c2093ca692d94c1f52d4a82a36f09623374af8caeb82f66553e51235b93dcd2b789bd32ecc2c182ecfea7c16a33fbd57911b59957aedc6
SSDEEP
1536:SAVJ0mWeB/iU9agP4mkV0IUCohOcFkWGjkLEC5EQ:zJ0mW8/i3C4mkVLChOw0koC5EQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2860aff9f182fda16578521eb089a742_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE