CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cfe35b2de35c85d8fbc2e3b43c284712_JaffaCakes118.dll
Resource
win7-20240708-en
Target
cfe35b2de35c85d8fbc2e3b43c284712_JaffaCakes118
Size
98KB
MD5
cfe35b2de35c85d8fbc2e3b43c284712
SHA1
d4a66f35503dd10d7cfeb8a4a94486fe7ca4e475
SHA256
6cf501dde072179dd5bad897a06f7960e185e9d8814294e575bd3ef6ac5bab87
SHA512
c952e6abcbaab7fee1f2dbf6e6ed76c043c7d1baee0704979ff0b526f0e31ea2f1ea598a3d630281983345bfa09858fb1960e368b79afcc91af1942bdba6ea09
SSDEEP
3072:pymhYhCqgNzpycdYX9H0sXRn2veUPKDYZDN/n61F3:p/hYhEscdYX9H0sxp2KDYZd0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cfe35b2de35c85d8fbc2e3b43c284712_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE