CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fad9ad353b52f884f53fcf0a7051af70_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fad9ad353b52f884f53fcf0a7051af70_JaffaCakes118
Size
93KB
MD5
fad9ad353b52f884f53fcf0a7051af70
SHA1
ddf40eb8360b7616fdcae185af614291d6b3a343
SHA256
6dbffd02cd0beb8fa76aea9cb63426a05491ba442b6782c2a8b52100bc3b87eb
SHA512
fd2675817cfd64dbcbfcf6f9ee547877a0b29a7f5a9f5257373cd07ac4bc660fa697f55f90550441cb31f5c91d9fd297432784fae7e603165ac0a3b8a7efc30f
SSDEEP
1536:0SBGICmjXCTyBetAxeNlJ52xQ54YOzqXAzMSTWqFr5E:/BMmjXCo0oW1O4kWIrO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fad9ad353b52f884f53fcf0a7051af70_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE