CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d469bf60c6dfd037950528f23b034079_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d469bf60c6dfd037950528f23b034079_JaffaCakes118
Size
103KB
MD5
d469bf60c6dfd037950528f23b034079
SHA1
f0aac7040f2acc73efd0e73a80490cf38921a034
SHA256
de7cfb1fcd3e960667188e8acf94e4e25a1f60243107490401bd439fbc22eaa2
SHA512
596d928e4467589a30ee853ca1b06570787d0755e94ab8401eb4886cf1790141841feb0763fc441ac059d30b871b653c10bd7c89aff972e97d279b4b90415306
SSDEEP
1536:SQclh8MIwu5+oYI/MHSEZubjeV1Jpy8p/n7DWyXpP8W:ahdIw/oYIXkpfv76apP8W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d469bf60c6dfd037950528f23b034079_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE