CancelDll
LoadDll
Behavioral task
behavioral1
Sample
9fcd3d102f33daf5068af0746c8540e0_JaffaCakes118.dll
Resource
win7-20240705-en
Target
9fcd3d102f33daf5068af0746c8540e0_JaffaCakes118
Size
100KB
MD5
9fcd3d102f33daf5068af0746c8540e0
SHA1
f4aa5cfa49c9c299ce9244d17e7d9ae04a9117d4
SHA256
c0d2d620cad2f8d1db0a69f6e68fccba88cbf11862e3032b5d96fc2fc5ab27da
SHA512
75f8b48a5495124c522f76a4ec92e5860f846f35684f9d0859d322d1facf2a3bd5efe8a81232a2e1f37e4b0873c357fc8e4e4c1fc04d460d6279f04912d39887
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8xeEnDVqnApefgUy7NrNeIG9TJ4k2cpmMRjES:FfUxhDtZp8vIdCFE2qA+gFTGFJ4ET5ES
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
9fcd3d102f33daf5068af0746c8540e0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE