CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d643bba17e80ad3571276bed0fee74cf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d643bba17e80ad3571276bed0fee74cf_JaffaCakes118
Size
94KB
MD5
d643bba17e80ad3571276bed0fee74cf
SHA1
13e274235f9fcf25020960c1c0153fa75d1f3097
SHA256
1c79d7d624ec14922de8f8105c3483f9ebcb818291e20a73b80423b0097b9a61
SHA512
c43d2b2c7790661cd156212c1a46cec0217c5c1f0309fe46bf94dbaadb0d2832aba11709169fa144e178f623574ccfa48795732faa2ee3ccdad37637c3b91b74
SSDEEP
1536:Zn4Mi33LS7enDxBg37kVMufhH5pVs0kW9YCIjYOIuMj1X/sykc8:Zfi3b8enD3okS8ZrYxjYOpMj1X/s7c8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d643bba17e80ad3571276bed0fee74cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE