CancelDll
LoadDll
Behavioral task
behavioral1
Sample
402074abec6b65ceb05602dd5730be74_JaffaCakes118.dll
Resource
win7-20240903-en
Target
402074abec6b65ceb05602dd5730be74_JaffaCakes118
Size
108KB
MD5
402074abec6b65ceb05602dd5730be74
SHA1
b9f0089b1f715a5fe22f60eb4bdb3fdd5cbb538a
SHA256
876ba5cd9522f725eb19f3a40d02846a6ba6873ac0c0f4b33ae35a2b27320c9a
SHA512
d99748d780c57eebcff9a39a8cf5df5fa8a2250c7cdba6b420ab862b828b3cf407084ec1b34ded9a187e645ee149918133d8fc574990c80ad2936164b9a8dfad
SSDEEP
1536:SQclh8MIwu5+oYfpXkBkIGAmZfb4wjaTpIN4pBxOyhu9j2lUzjZBCsAy:ahdIw/oYhX8mZfXaTSwBM24ZR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
402074abec6b65ceb05602dd5730be74_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE