CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dfd79fc496579f8288ecd8ca7f70bdbb_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dfd79fc496579f8288ecd8ca7f70bdbb_JaffaCakes118
Size
83KB
MD5
dfd79fc496579f8288ecd8ca7f70bdbb
SHA1
b3351d68c8fbd8649af6bcf86eb73a0350af4a8b
SHA256
1825f7a4153657cac2cf3276bd8e79ffa462c365ecbfe4d7b8e382d684706b44
SHA512
5fbad59f05fa3169818c60ac96c7a24d8f5a1848700f13d3eb305487cea37105f1c851d169943f0f428f1f206a83d4002969d636c30a0a493c38f3c311ab035a
SSDEEP
1536:Zr4dVzqJdgJhjJKSYdMYsveieO73vrI0zh:ZEdVzq4/j5bNGiL3zIQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dfd79fc496579f8288ecd8ca7f70bdbb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE