CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d6c58a7fc0797ae37c41945371a14d4f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
d6c58a7fc0797ae37c41945371a14d4f_JaffaCakes118
Size
117KB
MD5
d6c58a7fc0797ae37c41945371a14d4f
SHA1
b273358b9d0f2517ab9e00ed454c2eac3fd5a1ec
SHA256
b7344d966f13898b92aa597a8392b58bd3ad5495b499d0a6ff10fc76f1b8b257
SHA512
4694db85ff7b68b4b9d30f9afdec1e65a6a3c1e31ee9049fb8aaf51deced6e758193a448adf6aa1c4def9e39e87fec7b48381ec4c84a4e19ec1f45e0fd934704
SSDEEP
1536:6Rw9k6k1FrHc5TGAshPBry7sOMdgzymU5:/cHr8R9s/5My1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d6c58a7fc0797ae37c41945371a14d4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE