CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d21b32a2f7bc237cd6ac8069fb5f91ea_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d21b32a2f7bc237cd6ac8069fb5f91ea_JaffaCakes118
Size
128KB
MD5
d21b32a2f7bc237cd6ac8069fb5f91ea
SHA1
66475156150805d332b1c4bf0732b37eae2e1fa7
SHA256
0479a1614866394f327b1bc069970c06810f3c434ef8844450d9be2f7b7416f2
SHA512
3ca63c5b27ff5b7afc1361ad00593cc105ce75b21559f657b101a03de278d53c935c91f81e9bd24f09eb9cb6d908321217ea75af20450c9c3f9e82ddff3d5865
SSDEEP
1536:9NEFUaLBF/H8l8aTTfX+FevqCBI2idS4X+rZPTqlJ2:Izj/cqOfX+FTCEl6PelJ2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d21b32a2f7bc237cd6ac8069fb5f91ea_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE