CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dcaabb295b8c19c5c95b9400a707758e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dcaabb295b8c19c5c95b9400a707758e_JaffaCakes118
Size
79KB
MD5
dcaabb295b8c19c5c95b9400a707758e
SHA1
71629b8a5e8ed307dddfb2d16fe898ac878edfee
SHA256
d857f084ff9019c03a0cddac8c22379f7a7620326be85c0887a8a0ce07bd9122
SHA512
84a0c8a1c5fd949cc71dd89b00327c4cde1548283260149410271091882eb5df080367d0c4306114886eef5a9e8ce9b78f0bc6585e4db3d2c2216c3827fb2e2e
SSDEEP
1536:SAVJ0mWeB/iU9fyq11O2Qhhf9QpUVC5DPRmOdbHW+yUXkJ:zJ0mW8/isyINW1QpUUtjWSk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dcaabb295b8c19c5c95b9400a707758e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE