CancelDll
LoadDll
Behavioral task
behavioral1
Sample
28be2b987c8fed33a389e81a134df2cd_JaffaCakes118.dll
Resource
win7-20240903-en
Target
28be2b987c8fed33a389e81a134df2cd_JaffaCakes118
Size
107KB
MD5
28be2b987c8fed33a389e81a134df2cd
SHA1
06c532a93c02b64689138efc40e2cb69782251f8
SHA256
dacae635c7963eed4b7cb5c764fd38c16316f6470be936d081fb5489d747fd68
SHA512
7c0602dff1e79829af62764c64eee9397d52829981c83ba403595c4f6b6d4861ba678a1f9ee766b1e3faba6e78b7f2bc5cd048d253b90cc0f2bbebcb0d04b288
SSDEEP
1536:enin2eciGfPpHEfBEuZaQIVIsiZTcSuFO2s1e5XQR2E1mqDhuc:D4iGfufBEusQgIX9LuSR9mqDx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
28be2b987c8fed33a389e81a134df2cd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE