CancelDll
LoadDll
Behavioral task
behavioral1
Sample
de0ac498d3d94568b88c4cdfbf9a0498_JaffaCakes118.dll
Resource
win7-20240903-en
Target
de0ac498d3d94568b88c4cdfbf9a0498_JaffaCakes118
Size
87KB
MD5
de0ac498d3d94568b88c4cdfbf9a0498
SHA1
b3a11c4bf141a0d5c110e0f7f8eed660df5c8a7c
SHA256
17506e15241c04834cacd02ca73bdee664aac069cbe526af633da4d0b91db4e9
SHA512
cd952135752bfa8858894a70db860679eab2e3e7d948d35bbc068d079e87829241b76a33aa754eb8950b38fefec604e151fab43858159c63b02c4fc29336ef54
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8EuHoI/6nxjJVoBv6ioN9vX33:FfUxhDtZp8vIdCFkx2yi4fn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de0ac498d3d94568b88c4cdfbf9a0498_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE