CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dcfef33d1f5c8fc86e5956f643c44e31_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dcfef33d1f5c8fc86e5956f643c44e31_JaffaCakes118
Size
100KB
MD5
dcfef33d1f5c8fc86e5956f643c44e31
SHA1
f9d96ad2251366e083e71683bbf4d6747ae0e137
SHA256
cd4c1d255aeb07092a9625d2329a4b2103b409fb15c3a0b804ef5bcf45650137
SHA512
f1c2abf4ff1d41d42e3feb243f7264f00a957fd0124a262904107d8b000f71019088f9626f289148c40a00e625997ed5ad854f30f7db3ef3468bab1ac83543e4
SSDEEP
1536:RosSg4ngB/6hVLVBBzzpzM424Zm0nhwxPkYAjqJtrvVlM52Sp9TnRBn/V:1SoB/67p3I4Phoq2SpFnDV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dcfef33d1f5c8fc86e5956f643c44e31_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE