CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3d16666643053d21b45238a9eab223ba_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3d16666643053d21b45238a9eab223ba_JaffaCakes118
Size
88KB
MD5
3d16666643053d21b45238a9eab223ba
SHA1
6a7f3bf8f6216c94277f71904ce8d014d40d7819
SHA256
c3498b1fa1e62627fe25062d0e39e0c84fe026b144b3e422251749edc78bffe1
SHA512
54d23ba1e9228fa3144fe44aabbb9ff27acad31403132049d826eb46087da8974e66fc378ae41bee0c7672e5a83e2f18fb767116c767f18d8fefc94c4d412c7a
SSDEEP
1536:e8/mATyLDMEsXTzObgWllQ0sqNDXwLNZpp2Ol8Q6M8tvADhw2Y1h:YwgIEcOEWExe0T2OmM8p2oh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3d16666643053d21b45238a9eab223ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE