CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f01d8af8915bc77d6a5faa694673232f_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f01d8af8915bc77d6a5faa694673232f_JaffaCakes118
Size
104KB
MD5
f01d8af8915bc77d6a5faa694673232f
SHA1
54446ecfbd225c4cad9cf9057ab36e891253c4dc
SHA256
9e45bd52e130d65114991aef9567e09f516e78b359750f13f38eeff28bb02769
SHA512
273209f65c590d8c0eb89e1eb65f2dc3624a13a084da8b9eda2d8945ef1aeb376fb64e90cfe426b744e34eb339e2ee942284e9439c10b116d0e609668eacaa42
SSDEEP
1536:fiJJJXbJlTYTnkddHQfxUJBau6kcDhMNNzk5U4yAzfWe3yO/401SQmi:GJvpYTnkddwfxULaDkcWY5DfX5A0Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f01d8af8915bc77d6a5faa694673232f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE