CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3bf56a47aa8020a85a2403b908f14987_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3bf56a47aa8020a85a2403b908f14987_JaffaCakes118
Size
96KB
MD5
3bf56a47aa8020a85a2403b908f14987
SHA1
1720acce515c343b78b3fbb7195c23b8a0a07fb0
SHA256
17539b78ba1a2e704db02d10da2be832c8f60ee9976b23d42278564d93f1c8e2
SHA512
2dc980aa490411b9762baf94c55d8d84428758ef4b1af1a0c1df2bb0a3ad4dbf26ccf8579a5925a91d0ed31406c968775731a98806df88f19e9521ff57cddda2
SSDEEP
1536:Zn4Mi33LS7enDxBhJimc6zWnvASOVrp0J1KXrzuFZ9qqGU0xjy8Uk7t:Zfi3b8enD3Kmc6qISOlqoXMPqSvyt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3bf56a47aa8020a85a2403b908f14987_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE