CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ce9cab1bad8d1e467ef8635ea9513f80_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce9cab1bad8d1e467ef8635ea9513f80_JaffaCakes118
Size
99KB
MD5
ce9cab1bad8d1e467ef8635ea9513f80
SHA1
a8eab661205e7fb3682af2f7cd102f404c8d7680
SHA256
7bfbd3ce3f10c855fd9c7747b1ced47334c4f049fee08e42f4d93120422b1af9
SHA512
d86e92ef56bfb1ea8f4e1d64f4c338419e8845497bea5bbdb11044aad94d0c33bdae9a0bc535b7f83b28dd856e58c88571cd7087594092e01c3ee52a5cf042c8
SSDEEP
1536:Nr1O1I7ZMTSrnTtanLJerGiGxUqRd7ofPkPkP6FHDokrNbVJ2qA6R2/Nl:N9KTSrnIn0WxtXKbOH/3JS3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce9cab1bad8d1e467ef8635ea9513f80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE