CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d04be864ea5d65833451e625d5f1057d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d04be864ea5d65833451e625d5f1057d_JaffaCakes118
Size
6.4MB
MD5
d04be864ea5d65833451e625d5f1057d
SHA1
d7a824b54ae785aed9aceb466de1c1ee03aab2e8
SHA256
d6ecd6977f9467b7f4caf3803c060aae6306735bc90c9cb2c71107f13d9d269d
SHA512
a0018289808a11c69ba5016b4445695225a149bae3f3909aeb309264346c48feea1470be9965a81db7a8861e8ff0c210fd5b8cd6b3af27f1263a13a0c835321b
SSDEEP
1536:/McO5rgsYOoGAeym70c29gKeBUGMHFa4t2sEz7/cEvONDn:kcO5UsYOos4cEgrpBogwEEn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d04be864ea5d65833451e625d5f1057d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE