CancelDll
LoadDll
Behavioral task
behavioral1
Sample
37856a71dd8dd6846b2e47ace25befbb_JaffaCakes118.dll
Resource
win7-20240729-en
Target
37856a71dd8dd6846b2e47ace25befbb_JaffaCakes118
Size
136KB
MD5
37856a71dd8dd6846b2e47ace25befbb
SHA1
3f1aa35ff559531a20dc8e54037611ba1b50da70
SHA256
2e056956aafbd5bdd22341b32626d42a9c211056a50db3ec4b74ede81c15b92c
SHA512
17af0b5bb47de3ceddb918fe6f1ce7b7274e1c475b27c1974fcc106148e54f4b62bea653dbd3ede9513271ba6bff608e618802b12e9fd3c45f7b75d98e20e275
SSDEEP
1536:6Rw9k6k1FrHc5oa7hNHFm/Rp68a8m8XlR4iRbDs:/cHr8WaDHoJpba8R4QbDs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37856a71dd8dd6846b2e47ace25befbb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE