CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d7346842d9d1aea895f00a4e178cde14_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d7346842d9d1aea895f00a4e178cde14_JaffaCakes118
Size
93KB
MD5
d7346842d9d1aea895f00a4e178cde14
SHA1
db136da6e47e36c0acc89ca4340866a23069ce78
SHA256
271fb3494cc4e0921b356e6db411f39e62f6ca22b1131c37977b3f097656c5ab
SHA512
a502971cbd5a3906450d5e7f0fa933da07e9835cab01ceef6a616e336182632352ec2f0bdab81e9226f48f43f487f45d5deda8ac431cd6094ce6d11fd1de98cd
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvusvK9ooaSrazYwi65d13kObKF7n6sv91:6SFMDgVswFLdNzvKJaVfi0T0tnr91
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d7346842d9d1aea895f00a4e178cde14_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE