CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dc715890c40c3a6e01a5b6f6c951cfb0_JaffaCakes118.dll
Resource
win7-20240729-en
Target
dc715890c40c3a6e01a5b6f6c951cfb0_JaffaCakes118
Size
149KB
MD5
dc715890c40c3a6e01a5b6f6c951cfb0
SHA1
0c222d072a9a7717b222f75315bc797ff5ccadeb
SHA256
67678cb83f012c29e0879b434bf046097589f261393a207197135df89742c7db
SHA512
3c90c4a50ebf7dfb674527ec36d5ad0a45b35a8e739fcb526c5a651724ff5bdf02e556a9c0e529cae37d65d05654d2ecfcda0cd34f8c6ede7f334a4d82ae212b
SSDEEP
1536:3LXv6XMYC2pBzaquOspetSlwYmYNCj2dKOWvKoC4VvZ78GUp8BXoO4GaMbU51e4N:3ibBzal9eawbTjUKFFVkp8BXoAas0IHa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dc715890c40c3a6e01a5b6f6c951cfb0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE