CancelDll
LoadDll
Behavioral task
behavioral1
Sample
41e9540d18833f89b07fa710f8a997dd_JaffaCakes118.dll
Resource
win7-20240729-en
Target
41e9540d18833f89b07fa710f8a997dd_JaffaCakes118
Size
6.4MB
MD5
41e9540d18833f89b07fa710f8a997dd
SHA1
9197df7b9c02bc6ecf984325b97fb22d11a54a4f
SHA256
13cb0a46008336710bd157b19e50178afc20fde753b118e89088802d2852065b
SHA512
08bf8f069daa7c5dea093d747476a5312b2c2573fc797205fbae0b3eeefe4e5f96bb364e82ee9e6f14a7a4d1602883cfa60e8ddbf4c3f64faade89d98d067c0c
SSDEEP
1536:yzfx7c0lQLwSLGW3NPbnsuNyrW5QMiyHGTKI6ixyJm:Qf69wSLGW3JNySNiyHGGzo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
41e9540d18833f89b07fa710f8a997dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE