CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cf49889d84c29cda861dbcc191e21b32_JaffaCakes118.dll
Resource
win7-20240903-en
Target
cf49889d84c29cda861dbcc191e21b32_JaffaCakes118
Size
85KB
MD5
cf49889d84c29cda861dbcc191e21b32
SHA1
c1d48c3fe2b8b1463f56bbb22aa5247ed3895ff3
SHA256
7ff3a66d743a57df5cd80ab1155c540a8483b714d7d87310c9b0d00e53a9ec1d
SHA512
4be10d615faa58f2e69ba5eb84da1f60324035ffab1b751e52cb755bbf785d9ccb1ebdc13d9f903c67762bc4e86cc4d5acbbff31d70b60e423dea824927db888
SSDEEP
1536:mu1sAE7XCLGxxe/48rg/JqF9BozhYp8t2yzhw1AQpJGelgzFPd/I9f:muXE7XCLGxxeBg/Jq3BozFt2F1LOelgs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf49889d84c29cda861dbcc191e21b32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE