CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9522a0abd4d53a45e2c3ae1e5e9a9f0e_JaffaCakes118.dll
Resource
win7-20240705-en
Target
9522a0abd4d53a45e2c3ae1e5e9a9f0e_JaffaCakes118
Size
89KB
MD5
9522a0abd4d53a45e2c3ae1e5e9a9f0e
SHA1
0b4785ae7ff85ce3a564299b5c8f2b825fa442bb
SHA256
cc06c6da505f3dd7277a2c73cd1a58ddac0bd95b33d6dbf91910ae84caee8ea8
SHA512
9cf5542c1c7eed3d05b0390876262a66c9ae3f0b2a69bebdab6dd2f0a7b05be02c1e245f21ef625dc5b0afded82aa0eb575d054ce95141f5efcc63ec10f292e9
SSDEEP
1536:LmSQNbJE1vj8gDxkOTDjcYhn3pyvLUmcaXzM5rd/zK+nkF/:LmFty1L8gDyO53+brDozK+I/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9522a0abd4d53a45e2c3ae1e5e9a9f0e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE