CancelDll
LoadDll
Behavioral task
behavioral1
Sample
df18523ab1ada3e24b88a23c6b4e07ed_JaffaCakes118.dll
Resource
win7-20240903-en
Target
df18523ab1ada3e24b88a23c6b4e07ed_JaffaCakes118
Size
91KB
MD5
df18523ab1ada3e24b88a23c6b4e07ed
SHA1
cb6d5eac4472dfd1c4bec35642941b4b38a8d70d
SHA256
fe0f17ab4a8f710660ee98061803e8d6e6e0a6b6c65a0f3781a1b7865676df5a
SHA512
ca636888fbdd1e5737331e7a0c9c7310a623d0a2098b800c8a18b4b2bc3cca5bd8541dc6e2bade01355d9ef6e44ae1bfab2e9aa79ae22791f02891582a1d0ea4
SSDEEP
1536:Zr4dVzqJdgJhjJKSY7LEeml4X6VcaL7WAEazuonFMC50V+l:ZEdVzq4/j5OIXlFiaLQZQFvSa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
df18523ab1ada3e24b88a23c6b4e07ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE