CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dbc39fb8289f3b7151b1f0d7705141c9_JaffaCakes118.dll
Resource
win7-20240729-en
Target
dbc39fb8289f3b7151b1f0d7705141c9_JaffaCakes118
Size
93KB
MD5
dbc39fb8289f3b7151b1f0d7705141c9
SHA1
8f14577dadb88a9f908a3b8fdc3e4c0e50a4785f
SHA256
16760591e765b84f9a7cd8e25fa97babdbaee8c02e367d48706892e774f11aeb
SHA512
2bd60ecd1b275581ac75fa9cdfcc2663a7fbb7a0d66d33916333614e6b29715ed06df35f2ae4b6bcbd5b7af9f7b7fc36ab92176ad20257c4eae5efa050677280
SSDEEP
1536:TD6K271gp7DXHQ49ATJVCWaon91uTVQb99T8qHEvMHI:TDGYLwwSWW/ux7qkvMo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dbc39fb8289f3b7151b1f0d7705141c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE