CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d4b83852fe4707e832b8eed9040b6786_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d4b83852fe4707e832b8eed9040b6786_JaffaCakes118
Size
2.1MB
MD5
d4b83852fe4707e832b8eed9040b6786
SHA1
8ffde56b13d50c4fae1a6f51b7f0903420c8e2a0
SHA256
f1ea16cc744d07fad08058baf2143745a5dc7d5f9d4891efba21b872cabe0cc1
SHA512
f2e705c45ecd043d2b36b90cd3768aa9e83125982fdbd180b4ca99b83fc8cbc8f927a6f572ccd5ca40e8e9889ed29055fe0be383c8996ffaec094e311e76ea76
SSDEEP
1536:QG2owFRBqp+/6MGzvyoPBjc95l1pjtRRNNs88EkPY8+TLgOpG9Z0qrkpambT:Dhwz0p26nVPdizR0wTLgBgqrWaw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d4b83852fe4707e832b8eed9040b6786_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE