CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d9e1d7c68f50ac7b5fd647efc487d416_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d9e1d7c68f50ac7b5fd647efc487d416_JaffaCakes118
Size
100KB
MD5
d9e1d7c68f50ac7b5fd647efc487d416
SHA1
2f170cca0e9828afbf8af84743c4d8cc9cba4bc0
SHA256
9fad0c10527061009be0f0a289c2bd734eb4f5438e16d27a5156f89d642fc4f2
SHA512
24c3fc74939618ae2a074483adc821c73a58b8a4e9f5931be3cb41b904472b05729efba7039a328c8f649340cddeeee0d21ca7f6c6224da00ea00e402667def3
SSDEEP
1536:Ey3jeci2fCM4/Hoey5OPHP6F+3fhps5ooUd3vuGyiw973a/ODNT1:tJi2f74/Ho75uS+3fM5m3py/13a/ODNJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d9e1d7c68f50ac7b5fd647efc487d416_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE