CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fd76d75ae7796b33495d124940b9510e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fd76d75ae7796b33495d124940b9510e_JaffaCakes118
Size
98KB
MD5
fd76d75ae7796b33495d124940b9510e
SHA1
eca6e366058dda601d8af171ac40179aa005a7b2
SHA256
83d8c1bae168f7a35d4e6ad4979888f54a3b6608ae511a8121a95db7f7c04b18
SHA512
8a3751a3f4723284d081a06ce411dec50cedc2f2bb87498e537e979335ca83f6fbde83d09cc697e973b7a87daa57553ca35190d1122b1d4b57930d6a1bfebb85
SSDEEP
1536:TD6K271gp7DXHQ49A4bfHgwVOOFInwz6cwaiD7uir0sLjckg1bjWo:TDGYLwwTxLFIF790sLjc7bqo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fd76d75ae7796b33495d124940b9510e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE