CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dcd5897802d3f9788cc1a617aa9493a5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dcd5897802d3f9788cc1a617aa9493a5_JaffaCakes118
Size
82KB
MD5
dcd5897802d3f9788cc1a617aa9493a5
SHA1
024d2971d12e16900072dccba396cd83945cde6c
SHA256
e8edb5a3f3d57fe2fca3f8922be6e23ad92cebcfb3b29cb9977cf9d284bd1ba3
SHA512
e725bd5b6fbf4c74a79d9476e2e403a301da7dce68e17e66b45b8e162b975fbe48a7fd5756c618e96a24492ca363b3f6f294c1afea60a36539987c80e4a94f6b
SSDEEP
1536:mu1sAE7XCLGxxe//iFdEYEOwo9YW1Bzw82JHOJMD1ZBS5Mgyhx5EN5:muXE7XCLGxxeHKyr0F2JuqxLAMgiiX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dcd5897802d3f9788cc1a617aa9493a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE