CancelDll
LoadDll
Behavioral task
behavioral1
Sample
38dbb6b62180a09425f4b5758beb5655_JaffaCakes118.dll
Resource
win7-20240903-en
Target
38dbb6b62180a09425f4b5758beb5655_JaffaCakes118
Size
6.4MB
MD5
38dbb6b62180a09425f4b5758beb5655
SHA1
3ea0d692f4f880614e6814f552de393827092c9c
SHA256
3e815ec23240294948a15bdbb84394ac1a5f3deb04e42bf05eb3424e2bef2a12
SHA512
1534b2e94432b354a0e317e02824dcad5dad7c7b39c87d2bdf48d6adce323be6fbf0ea0503c4be7486c988ea3f2886851e7d6b009f49da5b24b00b8999ce5066
SSDEEP
1536:2ezi2W74vpdIBjD7kFsb/G5iAxWory7R+RV/cGuNJhXRCp3I6x:2ezI0dIBjPIwAxxnHnEReIM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
38dbb6b62180a09425f4b5758beb5655_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE