CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d196356465d3c15b97fc9455528b0661_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d196356465d3c15b97fc9455528b0661_JaffaCakes118
Size
92KB
MD5
d196356465d3c15b97fc9455528b0661
SHA1
c1b59f0aa8fdc69605ad4c438085d2dedd6cf24c
SHA256
b99d4d2009af7fef4217cc13c60e0482bdde6582333366b8ef4bda049bfa0e71
SHA512
d5f031bea7b6f507d139bb60e1ab9431dc88a5b919386c4ec00d09be0e36a08616a2460a0f9e46f2e65cbc6d7124922916e3ae0b54794bb6a41fcf478ad7e17c
SSDEEP
1536:7rOUbmJ/ZS8DDfKN9mug3/HIc744K7HOLr8Nsc8VvR5bDswVP1:FbmhoODfKN9muSfrKSLr8H8VJ5b/1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d196356465d3c15b97fc9455528b0661_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE