CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d1bb795429520b3051e2565ca72862d6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d1bb795429520b3051e2565ca72862d6_JaffaCakes118
Size
100KB
MD5
d1bb795429520b3051e2565ca72862d6
SHA1
f69875f0cbf70cd1bee9fd2cbafe014ecac3c78b
SHA256
006201871aa3a924a0c6b80bce89ec2e6cfe916a9e792c3130726c5231947918
SHA512
f0b0fcf4ad291e7ca64b841c89875c61f05eb00e617c6ecfb2fda6fc47b53d0280b144e8d448ab669f9637042d68687aaf809ac00924a2079d50cd1aa907fef1
SSDEEP
1536:EhK07MvjJjHcvTeOEa2H8Kj4VtcNmGQzsy708WkpRKA8950d:2KmMvjJCi4oj4ohAKOd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d1bb795429520b3051e2565ca72862d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE