CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c0ec00b1d2586e861de2c368c6bd44dd_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c0ec00b1d2586e861de2c368c6bd44dd_JaffaCakes118
Size
109KB
MD5
c0ec00b1d2586e861de2c368c6bd44dd
SHA1
7127a5525bafb5b9c7862db3f0d666e5452b8a97
SHA256
9c571295a409a6153634a3cd893785eb81210b1ca52d5dadfcc1aa744d3e8acc
SHA512
c107547668a684ea807a5aede15fdcab5b7e9586fa4a3fbf024c4b788993ff177183fc1db6f052230817fd7153f03040b91108a36396dc0c366d784f33bbbbb8
SSDEEP
3072:7RCVcAHzYRjDKpWECIUS2s4S7vTTnK9kjdHn:7syzR+WECIUHs4SrTTKmjdH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c0ec00b1d2586e861de2c368c6bd44dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE