CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d3484149495b86a1f84c3d11f80d160c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d3484149495b86a1f84c3d11f80d160c_JaffaCakes118
Size
134KB
MD5
d3484149495b86a1f84c3d11f80d160c
SHA1
4cfd9da3acbb8108cb5c32a1626f6d8caa2e6904
SHA256
0a0e86fb37ba6c7d36ae69ebf4e98c3139eba7d1a6cebac08e826884368fc74c
SHA512
250e8dabd0e516da418152044ba7a2526dd352813d896e63d1c509146811ce1d1b36b3b469c839d50b844e8d95f896ef55092a3833fa661ee3ea0e2bb77102f8
SSDEEP
1536:AHEkUaLBF/H8XE1ybXbLwHD3sJe6KBKYAHCHZ4eNP73rdccsccP:vEj/cXEmXbWcJe6eKY+mdNP73rqc+P
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d3484149495b86a1f84c3d11f80d160c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE