CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c010f7d104854ba57e67100fb32449c9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c010f7d104854ba57e67100fb32449c9_JaffaCakes118
Size
108KB
MD5
c010f7d104854ba57e67100fb32449c9
SHA1
b1fdf88c8dc4042f5fef2fb545a0ced4987c0ac4
SHA256
0fc3400a41fe8c653c4a227be74ba30b177144a542907a5ee76b1167ecaf1b50
SHA512
7a0bcd6e17f9c37958f4d033f1373fb3931860d06126063848f25327209a16fdaef3bd4e10993834952319005d13c0da1653ad1b9bb1c2f47cb15004b1f8f4f2
SSDEEP
1536:SQclh8MIwu5+oYO5wCfYmkJM9shn56oY7gWfmWofa4eJrltLP/v52w:ahdIw/oYO2CBg56b0W0fj2TL/52w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c010f7d104854ba57e67100fb32449c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE