CancelDll
LoadDll
Behavioral task
behavioral1
Sample
de1694acf892611a9110bc281f25d484_JaffaCakes118.dll
Resource
win7-20240903-en
Target
de1694acf892611a9110bc281f25d484_JaffaCakes118
Size
111KB
MD5
de1694acf892611a9110bc281f25d484
SHA1
8a89e065d4a641b0f12a8faa9d279781eebe3396
SHA256
6fb2d370960767902e6c3efffa52c481eb8f73193e71426cd54d752ba3ddb82a
SHA512
3495a194371cd9b04a4347f303bf0484f196e1ac85cfe6898a5e2492d97596f3289d511b3e98ee523fac86663df01e6c65adf3fcaab63c50e7c662c5fedf4178
SSDEEP
1536:Nr1O1I7ZMTSrnTtanLJGGhK5mLURG4zOQmTyZ2spkoW+JXTrS8y2rMcD2l:N9KTSrnInYx5mLgG4zOQ6GvkP8TrvPlW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de1694acf892611a9110bc281f25d484_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE