CancelDll
LoadDll
Behavioral task
behavioral1
Sample
da7bebc5ec676540d164cdcbc51ec43d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
da7bebc5ec676540d164cdcbc51ec43d_JaffaCakes118
Size
85KB
MD5
da7bebc5ec676540d164cdcbc51ec43d
SHA1
64cac6824f53f34c0fe1435a90c73708ae131e6c
SHA256
cc45f8bb5bb7bf757efe9bca058f0b447a5c27f7e642e2c935173ee631a24690
SHA512
88d7a33fe9eb69d5aa3c39f0a6d22d290edcd0830b5561313b058e333582aa9f871963386a09f78856f07386a37a149887674106a968176ba16eeefa22cfd018
SSDEEP
1536:uRtNn1pUBR8S8XFFebsVCnRQiB7pWyPLnuVbnq:uRtNn1pU0S8XFFMsVLc68
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da7bebc5ec676540d164cdcbc51ec43d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE