CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d2786828cbbfe8734cb7129163c1b852_JaffaCakes118.dll
Resource
win7-20240704-en
Target
d2786828cbbfe8734cb7129163c1b852_JaffaCakes118
Size
98KB
MD5
d2786828cbbfe8734cb7129163c1b852
SHA1
f5a0398de90f0d801f76979f59df01c65048d859
SHA256
bdb40e8c8f6149a13552ffbde98e473d9ee20547ceaa5d96a67eda313bb428fb
SHA512
2350ab3c2df827b5618090c8e44e0991ecae7fe480ed8760b28a50b16ebcd994737485101e7705d4a53038ec22a5adabd06664dfe62567cc1fdac274df4257ce
SSDEEP
1536:xNWujxA5EY8DwKtyId3jbbPbsbc2SjItFDgvt7w15pxWgyicOgs:u/2Y80yXd3X7ulSMRgV7WPdyDBs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d2786828cbbfe8734cb7129163c1b852_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE