CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d5a9d05e26b5e961bdcc8ce03309d352_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5a9d05e26b5e961bdcc8ce03309d352_JaffaCakes118
Size
92KB
MD5
d5a9d05e26b5e961bdcc8ce03309d352
SHA1
1863619a99bb0866e94bd78d886b2e5ef59b0ee5
SHA256
e36f65711a35222c13775c26c6baaa053a546268e1e5ecebe7c2f1fe0b164117
SHA512
d930d7fcee255d117ef5dce6f6d07a5e89c0f71d7c05055caf947c06a612ec10bab1a9f483189ebb64f61d4c7e46ce07377fdcf1c34cb23d9c2fedd865a60f90
SSDEEP
1536:LmSQNbJE1vj8gDxkO1e+UfutGn6huInOlFVvKMwRE/:LmFty1L8gDyOfUfuSeAFBKMwq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5a9d05e26b5e961bdcc8ce03309d352_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE