CancelDll
LoadDll
Behavioral task
behavioral1
Sample
56ea73d9c080d42623cccc255a7df708_JaffaCakes118.dll
Resource
win7-20240708-en
Target
56ea73d9c080d42623cccc255a7df708_JaffaCakes118
Size
88KB
MD5
56ea73d9c080d42623cccc255a7df708
SHA1
2d0d2fc2490d828bcaa8b1e7f6281377fb61d35d
SHA256
e22a0b5d5327f868db6677df0fdfc8d8760928987fef7864f996a0fbfc79d76e
SHA512
64d3f336e5282b6bc72f1dfc4b167395be216ab90b05a753042c3f864030b99e04a8f4425547dead8c95df3af2de4d8cdd2028b7689db7dad49cc5ebc71e30c1
SSDEEP
1536:qJRmT/O652E/RfzHii3oYtqeORaeky6/1ny5GgdaaN:Iy5jpiiYwXORafyUU5GggaN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
56ea73d9c080d42623cccc255a7df708_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE