CancelDll
LoadDll
Behavioral task
behavioral1
Sample
db4b738f5786400c9ca3dcc66883fcfb_JaffaCakes118.dll
Resource
win7-20240708-en
Target
db4b738f5786400c9ca3dcc66883fcfb_JaffaCakes118
Size
95KB
MD5
db4b738f5786400c9ca3dcc66883fcfb
SHA1
2f8ecd6e152fe1a0afb9f08ba48d1b22671bd040
SHA256
49c3ffc92fd163d5363c8fbc3f006aea1490c030ce96d855dbf9a4238d8cf803
SHA512
4a63cb51faf3ccf0e9ef0bb0116b4d13980286ef2b4905c59af1f34d23cbcf79b14a8f80c3782964e4d48cc99ff69da6eca366cdf676d49c126c4c9efc46d68b
SSDEEP
1536:qWNTI2j7IGPmy5guIRpsL9WHcSUaoIn9TUawumc0VeUVO3:qWNTHTey5HCe9w5Uahn9A7DNkUw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
db4b738f5786400c9ca3dcc66883fcfb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE