CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d425079e26dd90bcd6447c426d6cac09_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d425079e26dd90bcd6447c426d6cac09_JaffaCakes118
Size
102KB
MD5
d425079e26dd90bcd6447c426d6cac09
SHA1
edf97b818f29e1b41262cc49390d3673a031d43e
SHA256
449c32ef19b5aa1479ae18ca80594505cbc1627aab8c2e8835b68b500aba0320
SHA512
10f4b3f4364d6d6222a617cce2c2855043dc35481959d1d107757d6828bdd8bddb546b0ccf90d3736fd918eb7aac65eeb31d59ae50cf7bc7b4cb9beab84767b3
SSDEEP
1536:TD6K271gp7DXHQ49As7Q1beFWycG/Wsip/nJdua4FvRLCF:TDGYLwwh+8jcGpYxAa4FVC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d425079e26dd90bcd6447c426d6cac09_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE