CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d08968f36ebb6c748eb38bcbb89321b9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d08968f36ebb6c748eb38bcbb89321b9_JaffaCakes118
Size
88KB
MD5
d08968f36ebb6c748eb38bcbb89321b9
SHA1
fdf99d202082a2e1249a5d3e78647335624d5723
SHA256
d7406a9c826e4980a949d748726835ac993876199e0f56ed11745d4c99508321
SHA512
7fff44f76a9f58bacaf2b7bf2f25b9cb4a719b8e3ec2da87fc8414d08407daf5f5dffb0dd8976e57c7758dc564471cf3eec08a0c98bb96eb97f1e03508246de5
SSDEEP
1536:aI9js9B05V54qAazB4sJFhuWBQLGwfmtiVYRuSV:Xjs9B6A70B4EICMGwoaYsSV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d08968f36ebb6c748eb38bcbb89321b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE