CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cedc77707fbaaf8d539fbc1e2571815d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cedc77707fbaaf8d539fbc1e2571815d_JaffaCakes118
Size
89KB
MD5
cedc77707fbaaf8d539fbc1e2571815d
SHA1
1e3a95b419299d25302a96ae4dc68963b846a769
SHA256
faa7a18044d9c335973f535b94c89d7265f8edf03f413b22de1992459a2bc249
SHA512
8161437bffdf8811178fa390e5ca73a76a32eed35eb0e65bd60cee81c56aa61bfd421afb18cd3f34b3c935fc04eee71d90fc724dfcc8abc3852b69a51a32bac4
SSDEEP
1536:SM9jsxvhBfngI7sY2IMvWx9dMex9xA3cHSCu9a64NeaG1keow:3jsxvorYpeWKaEcHoqNeaG15ow
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cedc77707fbaaf8d539fbc1e2571815d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE