CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d59dec68665c5f85f4303d434de098c9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d59dec68665c5f85f4303d434de098c9_JaffaCakes118
Size
127KB
MD5
d59dec68665c5f85f4303d434de098c9
SHA1
4c7f548dd75df134eb0e0b731dfe5e4349f23cfe
SHA256
c9ab32caba38bc64cd5e2ae93406eb6adc757275464ef411507f9b4bfc0ab0c6
SHA512
e29a8c4c10749780d12aea6f0e74ea94ddc3a475c80fa19ccbc81a5b2a57aaa9e581ed510d55ab06d86c464590039fea82bf94f387ef089073c1d30cec0bdbe0
SSDEEP
1536:AHEkUaLBF/H8XE2Xos51n9CHtrtYizOuf5OsQZ3E:vEj/cXEios39CNrKiCuf5Oq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d59dec68665c5f85f4303d434de098c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE