CancelDll
LoadDll
Behavioral task
behavioral1
Sample
285f4b6e64854d097ab144d393ad0bdf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
285f4b6e64854d097ab144d393ad0bdf_JaffaCakes118
Size
96KB
MD5
285f4b6e64854d097ab144d393ad0bdf
SHA1
94cabae957eb1fcdec9a083f86dc215c03579381
SHA256
2bff2010b4cd7cec4136396ae05be66c9add92b784575c7d23c9b3806e646612
SHA512
778d6b550bad1dcd43248bcd13946544f809d44561e9dfaca42e35f9c35ce60d2b30881ac1db9bc8f867f599c1194824e6f0af81d6128c33d8d126bec72f01ec
SSDEEP
1536:QPHd2owFn+G5mAGHnWauoNmVpftT89G8/WfDloiSWhZzDmZc2t+Xr:QP9hwdmPnWQ0ztaG8/gqiznSZcXb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
285f4b6e64854d097ab144d393ad0bdf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE