CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d5acb72e198f8a36ac7eafbcad2d948e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5acb72e198f8a36ac7eafbcad2d948e_JaffaCakes118
Size
97KB
MD5
d5acb72e198f8a36ac7eafbcad2d948e
SHA1
3f1511b12e657b30d33df6a0c840811756eaec97
SHA256
72be4d57a4de34ef7b3e0946133062220b9c75c76f550bdf8ab3c5d516cd9a6f
SHA512
036a6a45f231cafa88aec14c9034c0291f01eee1bcb5305129c0378b46d4e08ec7f56b4046cdf0b6ddfc21847c4b310af8cdf3f97d6d6149922e91009d6873a9
SSDEEP
1536:2moLIIWdNE9jv4LsBgILohwLPndyM5ATM6l2ebLKCNeZ4JxKBrrhqqs+L:f2RWdNEp4Ls2DyPX5CjLKCBJxK6+L
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5acb72e198f8a36ac7eafbcad2d948e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE