CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3b290e30d1679cc0f062a573e5620c8c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3b290e30d1679cc0f062a573e5620c8c_JaffaCakes118
Size
6.4MB
MD5
3b290e30d1679cc0f062a573e5620c8c
SHA1
55b70060edc45e05c070cc8f3a22e966f288ea30
SHA256
c8e579df341e5eb3fb17dd3740ccc0cf53849ab809650834ca29f9f7a485c5f1
SHA512
e91eefe9b0c1dca58b69689b41c4810d2649f85cfce28885bf1510cae87dc9e3414d71fc5eb986beee3676936dfb55a9e57c1cf0222f6900c1f120b3c23a9b99
SSDEEP
1536:Bsc3ZQClsvD61hixxA6wCNzOaBUmyoaQ70Xr6bAKBqNdg5n:Oc3ZQCS7qiYrCNqGUmwbyAKYNI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3b290e30d1679cc0f062a573e5620c8c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE