CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d262936e9753f48b6cafeff480c4f73e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d262936e9753f48b6cafeff480c4f73e_JaffaCakes118
Size
102KB
MD5
d262936e9753f48b6cafeff480c4f73e
SHA1
f88e42ea106ce60121aa080765ffc2fb691c27c1
SHA256
99bc37d2833ba233d8d0b2c5da72b38d7a24c40f4cfd26a751bc2c7ddf69bcb7
SHA512
5c1422637c1d21795898f36a85e12364caf0bbd698f3d576a26fda30f780555a706546e1745a84b3f22909ed310562dac5754880060e6ab73fb3af3503d34fb5
SSDEEP
1536:7rOUbmJ/ZS8DDf25RsTxKlyd7OjkJBm7P4Ndv81/G/G0W6MvQCI:FbmhoODf2529KbjWqlMSkCI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d262936e9753f48b6cafeff480c4f73e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE