CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3f7f8a3e70242f5e262bb3a5a88c4e4f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3f7f8a3e70242f5e262bb3a5a88c4e4f_JaffaCakes118
Size
99KB
MD5
3f7f8a3e70242f5e262bb3a5a88c4e4f
SHA1
1eecab622454c49afe36c4976b8b6298d24cd42c
SHA256
e61ff2f0b7e87c248a55a078ce67f33f13f774419b7f3a8ddc22992b487437cd
SHA512
ad32a154532a9073f00acb1cae7b0a7a88ac15658008a4d08f267d02ce20e0d8a0cb5a74739f27ddbf5e1faeb0c6f0d10b13a566fd9df72ac4bf30b1f8804acd
SSDEEP
1536:OoKR1YFY/H4SXxyBvao5FLvzp3Dr5xT8ryoMv78qIF0nOD/by8xbV:+1YZSByxaojbhDr5xhooFZOD/bTxR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3f7f8a3e70242f5e262bb3a5a88c4e4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE