CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d3df0317a0b2db74907cba2c4f4ed99e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d3df0317a0b2db74907cba2c4f4ed99e_JaffaCakes118
Size
94KB
MD5
d3df0317a0b2db74907cba2c4f4ed99e
SHA1
1d0cfac0c8c04f2ce8586b0af50c39529f31119f
SHA256
9f89e36b68be3ced4599e89c8eedf3bde01091bfc28fcffb744a56e8d14c8260
SHA512
82ca0c2bcb756849da79a3f755a6b4234a2a5a5ad1dfbfaf61e7902e86a51df5ef28762726245c0bdd87b4afc9759440265613c97262ae5dc5635f6e88e9e8e1
SSDEEP
1536:LmSQNbJE1vj8gDxkO7vNUNxD5tq2UpXOi+Ab5mv0uA2eByoRCV:LmFty1L8gDyO7FKt5c2UpX6AzlooRo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d3df0317a0b2db74907cba2c4f4ed99e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE