CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ddf62d2050c0a8cad0fa8dedf7d948f1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ddf62d2050c0a8cad0fa8dedf7d948f1_JaffaCakes118
Size
102KB
MD5
ddf62d2050c0a8cad0fa8dedf7d948f1
SHA1
399d0ea52ae727df8fa168c4f5210ba80805986b
SHA256
077951427bc6226eaae9c09dbbb7e03a7f7f7e0aa4d909e104803b8c5ce991db
SHA512
7798787aa8d439e08064106b96c2310eec075bce8aadbf081ef3b92fd291c61ce7b5cccba732d74f2aa6516bc63c083e901dc029d3078533d1cf8edd5ddb952e
SSDEEP
1536:TD6K271gp7DXHQ49ABC5ivWEyIXKtQaUsNpuGiKZwokDGp4Ly6cmbtnd6pLox:TDGYLww+CQelIXKtVHNphfpkC0VndELG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ddf62d2050c0a8cad0fa8dedf7d948f1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE