CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ddc0548fdbbfbf02fde1cc7309987ce9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ddc0548fdbbfbf02fde1cc7309987ce9_JaffaCakes118
Size
109KB
MD5
ddc0548fdbbfbf02fde1cc7309987ce9
SHA1
4937ec1c8aa58dab371931d6c7d33bc903e52e5c
SHA256
6f2dffae524b2c5c8371ce8b1c8e841ce01d91e7bd291e58a31a39e755f38512
SHA512
b0b0d3d05aaae24654560905dd9f9bf5c343d4ad25f36265354721d1f90d8f838ce6be1bfa871b2b07a5f6ad8dc981657317ed8a45dea7fe950d491ce49603ce
SSDEEP
1536:7rOUbmJ/ZS8DDfN1QTdZ+9fQS8SJen4pAF7PffF0rE:FbmhoODfN14P8fhlen4pI7HKA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ddc0548fdbbfbf02fde1cc7309987ce9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE