CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d0bba8f410d1f13636badb5dc4f1ba6b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d0bba8f410d1f13636badb5dc4f1ba6b_JaffaCakes118
Size
95KB
MD5
d0bba8f410d1f13636badb5dc4f1ba6b
SHA1
c3b7feebb4ac55b1a4a3651b5189dbdd1b99323d
SHA256
1c9a132ac8d8a7307ab8ef7cc969578194ef2829793d4ac5dd03664255a00007
SHA512
57ba34d77c1fb0a295e3d17df6d9fcfd3cf1d85888e76b96d1c4214fa51220b3c6da2a7b17adab2eb71c8b467012665f5456b5714e8f0d649fd0cb341d2c1e6d
SSDEEP
1536:RvePeWR6R1TWweO/oIxjfgudIDuoQ8XBw9mQ+SAB:RmPeK6R1TVNfgwIDuov6mQ3w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0bba8f410d1f13636badb5dc4f1ba6b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE