CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d00e353c622957074db3c33aa2383296_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d00e353c622957074db3c33aa2383296_JaffaCakes118
Size
97KB
MD5
d00e353c622957074db3c33aa2383296
SHA1
d2084e06266b2749c10d0c04cb90bb39c3c2cb64
SHA256
a88ca754db670793bbd3189c52a7393f28b0e1892c38dd5f4a9dd5a157a92351
SHA512
bfc898dd60b727c260d8f04ae5feffe861602e52085771dfe97f0b79d18b6b08932a58b5114339ba429e67a2ec7f54b75ad5fafab1c704e0f169ec889b56a180
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvuTGGJQTkZHs07Tbc7TC7ek4SS5d+3rjNSlF4:6SFMDgVswFLdNAQTWxbc7Tui+33EQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d00e353c622957074db3c33aa2383296_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE