CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d0b009eb71de32cbcd5c41449463ccbe_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d0b009eb71de32cbcd5c41449463ccbe_JaffaCakes118
Size
70KB
MD5
d0b009eb71de32cbcd5c41449463ccbe
SHA1
c09a71dc651773b155ed69f2e4ee55ecbdae023d
SHA256
afddee57cf84259e5947e86fb6e85fcc4f882c744ca896ab57befced0244a186
SHA512
766df0e6b33e3a28a1fe1af7b129a0bd008e8c37a0f2d8b890bd9ffebed8bb9bda23aa10921d4d3455c8d964e8a40e158befe84e71a9f7be5c723cebd6946eda
SSDEEP
768:YJ5rs2oRQheR8rEWzWUBXgNFYzOmKEGhOKwM0tYSBJkg2zQMallHkzrzaj/YUYTI:YJpsqgQUNFs/L3BBJ4uVeu/YVtn2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0b009eb71de32cbcd5c41449463ccbe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE