CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d55578b9d66153481ad19bd1487d335e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d55578b9d66153481ad19bd1487d335e_JaffaCakes118
Size
126KB
MD5
d55578b9d66153481ad19bd1487d335e
SHA1
bc18b8a32f05b363cac83a0c87e55a4938661391
SHA256
d678942c85e7a529995655a6fa6bf8bf26174cc10adde491663c87b52388459d
SHA512
d3c89107aba12b31447a66d7d9872fc013c0c7e93c5af554b4de5ca608934f09ed6d6bbfb3f8afe63fa949a7fe4c7b0e1d69781e8b20e266e9f004cf97bc0b2e
SSDEEP
1536:AHEkUaLBF/H8XEdizIHi8xzj6+v7upswQB8wzmUi69Hjj:vEj/cXEdizIHiU3XuHQTzFDj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d55578b9d66153481ad19bd1487d335e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE