CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dbde0ac229138d271e746608922ed725_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dbde0ac229138d271e746608922ed725_JaffaCakes118
Size
128KB
MD5
dbde0ac229138d271e746608922ed725
SHA1
0dfaedc5eaa985499e23d450ae54a93530d8d656
SHA256
3c222211b9c6e320b5834f2a6735986f72d85688a9722d1b8ed88245ada4e208
SHA512
f3241a4022ea2fda676c94bbd205462c58324695ca927b6ced18d48e6f226de2a547be609b36edf6d761f40f830f3133b06be28ca60d9eff396141556b519af7
SSDEEP
1536:MDEFUawhF/H8fOxlt+Dn5YauEVrk79tVWTNlstagw5CqQJ7qdXeH7:j4D/cylOSaXlkRHPagw5nAmdXeH7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dbde0ac229138d271e746608922ed725_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE