CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f09272808b1a08c34b0bbd09d84b6f9d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f09272808b1a08c34b0bbd09d84b6f9d_JaffaCakes118
Size
102KB
MD5
f09272808b1a08c34b0bbd09d84b6f9d
SHA1
4aee6d6046a63b46b489aa4196af2cec90dc6d2f
SHA256
a00c02f0e7cb2cdfa3ae2ec1e237ad52cabadb045911dcac772af6fd3cb8e3b6
SHA512
a6be5b7cc1f3dd9742abd0eb3702b40319424d2fe500493349f5a7f68163a4a0da53d8c9d583cca141695e9f674180941685ce2fedf95a1d9fd62b2ed6f8ba49
SSDEEP
1536:TD6K271gp7DXHQ49AmU1Y5rpEitP2awvnxzsVikmauM6DAQhGi9ZbH:TDGYLww8kdh+nKoM6D3hGYZbH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f09272808b1a08c34b0bbd09d84b6f9d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE