CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f9f00c1f657fb0e663276ae3053f0816_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f9f00c1f657fb0e663276ae3053f0816_JaffaCakes118
Size
103KB
MD5
f9f00c1f657fb0e663276ae3053f0816
SHA1
2af1d44f72efa50c60253976173db1117a3f4fe5
SHA256
192531e7aaea28b3eac837d9bc027f6d75feb5dffa4ff9f17e5d310a05796be8
SHA512
a471f6bc2bcaa7044451966170441bd188bbc9b3216a7a89cba35611fae4b8775eb22f7e3b755cc04905522fc1c78af3b0c1b48294a885a2422f9b8d4af5ab80
SSDEEP
1536:TD6K271gp7DXHQ49AgNrcOuvporkSkE1RaKAG7kX1rjdKv:TDGYLww9cOuSrThAG7kX1Yv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f9f00c1f657fb0e663276ae3053f0816_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE