CancelDll
LoadDll
Behavioral task
behavioral1
Sample
db87fa4b9ffdb24478a50245f89309d3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
db87fa4b9ffdb24478a50245f89309d3_JaffaCakes118
Size
109KB
MD5
db87fa4b9ffdb24478a50245f89309d3
SHA1
2f16c9a6f04c37452647151dd0a834b6e30f9b9e
SHA256
e30b67c6c5b7d53875b73e2dafbd66512324ca74dd35859f22ec318dd16afb96
SHA512
c518955d4391d467e70037bc5711f41788b2f082c796c1ae6d34382ba7f71472b63166b75147618ee94a2f964ef68ead7e6e990fd3f9ebd6247b41430a140ed1
SSDEEP
3072:0RBNXdAK87xbMdlry4HhjnVKbscIsYDsHI:0RBBdBibMdFy4HhLYscIsY5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
db87fa4b9ffdb24478a50245f89309d3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE