CancelDll
LoadDll
Behavioral task
behavioral1
Sample
de84e2e8d6b05379357a5e804e1fd470_JaffaCakes118.dll
Resource
win7-20240708-en
Target
de84e2e8d6b05379357a5e804e1fd470_JaffaCakes118
Size
94KB
MD5
de84e2e8d6b05379357a5e804e1fd470
SHA1
ef715d94c16871504c81832bfc06c2e436807528
SHA256
b28bdd276b8770dcf55b065643b9484cd7d133a28e4347e17eb9f096199d5d24
SHA512
6234254ae3807a0fe52f2d1138f70f497381a80a24838bc70a1ba599f205f9944009bd23ba172e6dfad16c376df118a93475084e4e4b2126023894b13d026b5a
SSDEEP
1536:INWujxA5EY8fwKV05FXUL48ap/r7UoQ3kPcuRMMES7xYLp:x/2Y84C0vXUU8b0xKMbVYLp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
de84e2e8d6b05379357a5e804e1fd470_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE