CancelDll
LoadDll
Behavioral task
behavioral1
Sample
37c39507368c45ade87df72d54dc357f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
37c39507368c45ade87df72d54dc357f_JaffaCakes118
Size
100KB
MD5
37c39507368c45ade87df72d54dc357f
SHA1
9f200b7ca9bbcf202493b1d61e4449f84f86b668
SHA256
d6d8eca4a3e8535826963821931a4c1c97777b1e4b193579be6bfb1bc697b1aa
SHA512
0ed80d052979aed8ce59de2603de373de08641cfc282f5b0ceea663667f02012bee9b13fdc5e25e2435da6480bb091313085c3c5600be9097b4be584ab03ba41
SSDEEP
3072:Zfi3b8enD3wnRkSRSVHe+C1gvRGG1VyamNFWxs:Zfi3bZD3wn5SmmvRGIaNFWxs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
37c39507368c45ade87df72d54dc357f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE