CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3bf5b6c02e8ca9837266c9aff90429a0_JaffaCakes118.dll
Resource
win7-20241010-en
Target
3bf5b6c02e8ca9837266c9aff90429a0_JaffaCakes118
Size
98KB
MD5
3bf5b6c02e8ca9837266c9aff90429a0
SHA1
96486d85564c9f73abe7def61ec372d25c33b4f8
SHA256
872cab2a9e4b22af7421d8d0395c78c57ad3d7dea5ac4a3d9263481561d4bd16
SHA512
15c29333017bb042f3fb9cfb91f97113d5a8fc591bf383f376c2f6630272dac7a472a80962f32fc7b6eacf81e65c6345fde3a1065e4ef3d316fa19a17f37ac8e
SSDEEP
1536:2moLIIWdNE9jv4LsBgIezmgeiKvZsRBj2WXYXRoZP7Ku:f2RWdNEp4Ls25WIgoYBQP7L
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3bf5b6c02e8ca9837266c9aff90429a0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE