CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cde4a277e48ab248fdbd62f93855e472_JaffaCakes118.dll
Resource
win7-20240705-en
Target
cde4a277e48ab248fdbd62f93855e472_JaffaCakes118
Size
90KB
MD5
cde4a277e48ab248fdbd62f93855e472
SHA1
c8ab9a0573644520bff804e466eb45b0f181862d
SHA256
c30263d1b2d042375eeaf3dbf8df4739992670e767ef0ed1417ecc06890a4fea
SHA512
8655b6ee04d21836cee7c610879e7cdbba63afe2f62a776ea95d599fc927ccc8f224f73f2746a9153cdea4f0109bfca63a541f2e7e94ccaa30089f4b54f5fb8e
SSDEEP
1536:jpSyrn1CZZV1ErUuXippO+9HbQwBLUijJAE7HEpo4bKiViEihSjl7J4qM3:gyLSzErUuy66bQwhlj6Ekpo4bKQi4b3Y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cde4a277e48ab248fdbd62f93855e472_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE