CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dee88957f456c5951f4ca293fe73921c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dee88957f456c5951f4ca293fe73921c_JaffaCakes118
Size
4.1MB
MD5
dee88957f456c5951f4ca293fe73921c
SHA1
9c3137e4b749e996f4634cc64bfbb3a5d79d8c56
SHA256
52527a8ee74271d035ab7cdf3ba82d6c120b6c22c1443df379a7abc868532740
SHA512
6c77a58dd23b73abc928425cc169524149d5970ca623d6723f26b49f33307ab295d7b63389ce3e2df5e0253a7e3b572c908a67edeae1805862ce4be32cb00bce
SSDEEP
1536:k0o2N2owFL0rR+MXO2k+BWy1w2MpAY+UmR0OP7fS+lf2Kcb/+tvVs:k0o2NhwSrR+v2jkyacYqqOP7RJob/+I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dee88957f456c5951f4ca293fe73921c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE