CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d9c5f452018da47c3b9768ee9d846877_JaffaCakes118.dll
Resource
win7-20240729-en
Target
d9c5f452018da47c3b9768ee9d846877_JaffaCakes118
Size
89KB
MD5
d9c5f452018da47c3b9768ee9d846877
SHA1
8cb039d2be24a1a8c0009020794da1912f486efb
SHA256
37f8a12d0467e2a51189cf44c8dd4bb0c4232ead30b85f94731e5bb320094610
SHA512
7f83ef8956f43ecb2a8fa5559f5c332b539ba8d6eda66f1de3164dc3b2611f45f2bc327d86e4eb95790352ce48eca675af49fdbaf079a6bdf474d599b12d4fa8
SSDEEP
1536:qWNTI2j7IGPmy5guIRp6PpyqT2V6FwX+6IFtg39emLiKJr+:qWNTHTey5HCYPt2V6+GSLi1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d9c5f452018da47c3b9768ee9d846877_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE