CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f079dde998481af1a88d79d9114d7176_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f079dde998481af1a88d79d9114d7176_JaffaCakes118
Size
101KB
MD5
f079dde998481af1a88d79d9114d7176
SHA1
977a3d83a71231b9babea7a4729a2e074850d5f9
SHA256
cfcef084e8eabb75bab2d91893282e5e967399df46f5ac8a9bc642836117a693
SHA512
99e91afd9a5168953ce42ec247cfcc3248d99a22daf527179efe4185bdcc0b7f749ad100bab3bcc157ae0f884cded455aaad7d065149121ce148e71c17dc490a
SSDEEP
1536:53/5hksBgk16zIUiHThnPPB5gVGP67Pd/Q+UTPRfQUXgiU:53/5Su16zobeGP6pdUjxQZj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f079dde998481af1a88d79d9114d7176_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE