CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d0f200edb3b927863d7917e5bdeeea8a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d0f200edb3b927863d7917e5bdeeea8a_JaffaCakes118
Size
96KB
MD5
d0f200edb3b927863d7917e5bdeeea8a
SHA1
5d8d05937aee0d552a07c0db043c50f1c553a9e0
SHA256
21a89be09674d823f4aeb5b35258b27222561b47e0cfca1bfaea98de0e08dd7a
SHA512
259a75c6f63ef70cf670a63a7094c2ac7bcefee5ac60c37f8fa7a6bab1c348c2810405dfddce036d9d6d99355f53acf652849ebfabaa953609e75d7593e53a8e
SSDEEP
1536:MxvNbz0ZBTYCsSCPD0SFfWh0elEBIMMbppkU6MCaDLV:OB0BTYCsl7flWh0elCMFpUEV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d0f200edb3b927863d7917e5bdeeea8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE