CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d5e5b26bb0d049d9397b4db17eb5bff7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5e5b26bb0d049d9397b4db17eb5bff7_JaffaCakes118
Size
6.4MB
MD5
d5e5b26bb0d049d9397b4db17eb5bff7
SHA1
50beb1d9802c4df9473079fb4858ba0ba1d27f68
SHA256
f80e02259d47ce06be1ceeed63ae83246eefa80963a5e6cbb1bd008517c6a278
SHA512
6fc9503fe057d44efd073fc0fd23f997efecdd31a6056b35a2093d810b73156561046af16e66b33b00693d32cc89e73878f62cb8f256646a9be67e26d8ae7266
SSDEEP
1536:xYPmds0xHGI4yJ2hk57lIZLrbCMhsmyY/SVFw6o8xJn:xYP214yJ23LrOMhsmr6xb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5e5b26bb0d049d9397b4db17eb5bff7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE