CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d309aa60d3dc276c91d3278889ff079a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d309aa60d3dc276c91d3278889ff079a_JaffaCakes118
Size
93KB
MD5
d309aa60d3dc276c91d3278889ff079a
SHA1
dc37319a6f2541155b160426b434ff5f6e2c4ddf
SHA256
d9c9717369a08b03cce6b14afa5700344bcfebaf5fd37cc89620324c867738a3
SHA512
3b3f3dbca1e9ff16264fe59ded7ffe3529498f50afcc010b4a6f25565f5b77c8513cecc5e5f73773789a890b6d90cbda15e8ca9bd86eba1d3d49d63967b12a13
SSDEEP
1536:INWujxA5EY8fwKV3my9/B9HHolAYP/PwTihLMvq0cgGd:x/2Y84C3mQB9HHIPATOaGd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d309aa60d3dc276c91d3278889ff079a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE