CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c9093b058d141232e34725af2d1ec4c3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c9093b058d141232e34725af2d1ec4c3_JaffaCakes118
Size
83KB
MD5
c9093b058d141232e34725af2d1ec4c3
SHA1
28354b5dcfa8267cd106291a1f1b292726b3ffb5
SHA256
8612891a75200bcbaedf1222e2fad078617528a9d15ab524d68163659e6a0112
SHA512
76f967b7da8ba1797397daa7b8098dff155d3c9a5c7dc2d8ee972ab4745213039d3bb70af4984cf27fa5c97fd73aa0e76e15cd3e877b09fe6480590225204aa5
SSDEEP
1536:MxvNbz0ZBTYCsDbi0N7Oipq8EYg7X9hjBa/5R:OB0BTYCsBOipgYg7NahR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c9093b058d141232e34725af2d1ec4c3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE