CancelDll
LoadDll
Behavioral task
behavioral1
Sample
da7dbfc0c05b134413437623d8f2f67b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
da7dbfc0c05b134413437623d8f2f67b_JaffaCakes118
Size
98KB
MD5
da7dbfc0c05b134413437623d8f2f67b
SHA1
dd06b2de50d47ac63de38aec8c1a046993d5a5f5
SHA256
d2494d95534ec018c0b8ad8a6a55361d1ddbc0fe6e33fbbf470f0eb140859017
SHA512
68565c769f453340f37866280a680613913156f22c8f23a1d314798d271781411152ec9e8e389578b9b7734470447b8490b7b8f550cb1623e9f915368d5ef0ee
SSDEEP
1536:LbfRsoNi6NO3xLnFnKruE9Jbt60+ohAfZCCdZWN6UE1TBcR:PsgO3JFnKCext60+oaXui1Tk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
da7dbfc0c05b134413437623d8f2f67b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE