CancelDll
LoadDll
Behavioral task
behavioral1
Sample
de2b636adf830bb85448d7c4bca60e93_JaffaCakes118.dll
Resource
win7-20240704-en
Target
de2b636adf830bb85448d7c4bca60e93_JaffaCakes118
Size
93KB
MD5
de2b636adf830bb85448d7c4bca60e93
SHA1
78dcd00c209cc96a680f175be31c84da5cff4b17
SHA256
a6f4d61e74ab48e598a851a29955b40609cd3af2c7e7d3cf0f4cd26d9e7bc849
SHA512
96001f83f64ab3718ab2091b36d8eeb96f7ad39e96569950e3f337ffac479477039d150fddb761099920e48c1070571e2e521f8f709663e261cac7476015d338
SSDEEP
1536:7rOUbmJ/ZS8DDfLMrbPEmGLlwawW3HMK6O2S7hM71ZU:FbmhoODfoQwawgGO38U
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de2b636adf830bb85448d7c4bca60e93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE