CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fda9978a4f003a5fdefe7b31071971b0_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fda9978a4f003a5fdefe7b31071971b0_JaffaCakes118
Size
99KB
MD5
fda9978a4f003a5fdefe7b31071971b0
SHA1
5d5d604aa56310b5c1baae0e91831c517b6c3cce
SHA256
2e5a32a13a33a40a743c8da9e2ef26d1a0481907dace341badb897e6869e537d
SHA512
6ad3fba66eb59bbad6115d9109ac1fdefb70b36d6c5925b6e241691e3e934bfb9ba8d844e371c7ebe75d9d6ca8bab12584e220492911d1d4399a331bde3b49eb
SSDEEP
1536:Jj3lafACV9qgjasHzYYAjD0+ZGWIO9eP0ABGtH6eKZGZmOG16yhHDHlsfLXXNSX:7RCVcAHzYRjD/GFBw6W7m/QLnNSX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fda9978a4f003a5fdefe7b31071971b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE