CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d2a1a5ef225abbd309f87a2602352c39_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d2a1a5ef225abbd309f87a2602352c39_JaffaCakes118
Size
97KB
MD5
d2a1a5ef225abbd309f87a2602352c39
SHA1
88b36597da9c052c345e28b00a922ec5b7845e32
SHA256
9ce8c26cf8c8f24413e1e67fad6ebe13122abf782f47ec7c5e03d8bf0090471c
SHA512
c7de82b9359329925f0d5fa44562529d86f5b1aa8514f316540a84847f3df287c5818aaee3d6eff2e98936f2181e8d828bae48aafee29800a172caed6dec4534
SSDEEP
1536:LmSQNbJE1vj8gDxkOn4aubTSgi2rjaKQJ9tOCVJsa:LmFty1L8gDyOnabTZWKQJ9td
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d2a1a5ef225abbd309f87a2602352c39_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE