CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ded36ce96ac334b0dbd671dcab16f7a5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ded36ce96ac334b0dbd671dcab16f7a5_JaffaCakes118
Size
88KB
MD5
ded36ce96ac334b0dbd671dcab16f7a5
SHA1
417c1cb11e3b6d5894eb5a117e59801f41ab0b20
SHA256
7bd36bc5b811a44911a1463807d30fbcd3a228c750e7d8e4645bf80d7870ea29
SHA512
75f0765309010ce961f2c4744cb00e596a4d9d9aad289e960551af2f7ee00ae57deb6892c5b556d45594a7230c874f11b1c38ad2a45d3829ff20465765c6615b
SSDEEP
1536:SM9jsxvhBfn9/tPrMy3D/+Is+WKb601J2MoV737:3jsxv1/VMAiob/X2M8P
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ded36ce96ac334b0dbd671dcab16f7a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE