CancelDll
LoadDll
Behavioral task
behavioral1
Sample
de278b4441d8dac4c94fa089420877e3_JaffaCakes118.dll
Resource
win7-20240903-en
Target
de278b4441d8dac4c94fa089420877e3_JaffaCakes118
Size
141KB
MD5
de278b4441d8dac4c94fa089420877e3
SHA1
7bbf4de59767bd215b7f1eb838c92ef7ce821cc0
SHA256
ae25aeb3feb7ad58a2ba29305aa4ab655042b38f19e082bd4c6e0650eddf5a1f
SHA512
bd3efc5f58f4b5ac2ebf2af0381a39e756b62d8fad700e130c9449f121eb2fbd18f708d312c718e42eb8e0b05266f50a78e5ced921b09d522627246ca6d9d363
SSDEEP
1536:AHEkUaLBF/H8XEztmbvww+hv3sBt4T3PANKXX/noDwRScuvhXZzhC0a1:vEj/cXEBwvww+tcBeX/oDwRS5+0a1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de278b4441d8dac4c94fa089420877e3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE