CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dd9609202651b4c03782f865dea403db_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dd9609202651b4c03782f865dea403db_JaffaCakes118
Size
47KB
MD5
dd9609202651b4c03782f865dea403db
SHA1
f37e5cf261b0c81b500d751fe2207085fa7a8ec1
SHA256
22f32999b34f00a23fb3749b819dcabaf080f44491118e742acba3013beb4c09
SHA512
def7ca24d9cb59b7618407d967de3550e3146560c54c6e29d4fc710fd97d61a6f908b797707a5c3dc5562cc6a984c0e35df40f57f93f14757068ff2f82503a82
SSDEEP
768:9dEDBEEM4ZRvYMQMDgBCkds+Kbu2vE6mKEG3lFJO5skbV3wvWuVJ:PiEjmRHQMDgVspbuFLdVvu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dd9609202651b4c03782f865dea403db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE