CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ce4bdd01d053999c2808e073d5c3688c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce4bdd01d053999c2808e073d5c3688c_JaffaCakes118
Size
85KB
MD5
ce4bdd01d053999c2808e073d5c3688c
SHA1
c363dcd11d3846e6cf52373173a84ff55c6a288d
SHA256
357869424d988574b9d584d2ab1bc145057a54cecf941fdcd70dbbc841b4c76a
SHA512
ccdf4a1191e7b6791d38f6a190fb499c3e65a9eb926a08cf4448a06788a7614d2fef0b15ef9baacbd4ae12f88a104ddf0f551a1088cc81fe5a37a8ddb93d0213
SSDEEP
1536:7rOUbmJ/ZS8DDfn6svZp8MJuHHfoMHp4pAb1YUYSis9ia9U7SQbV:FbmhoODfn6yxuHHgMHuoY3pW8V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce4bdd01d053999c2808e073d5c3688c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE