CancelDll
LoadDll
Behavioral task
behavioral1
Sample
07d1813775db45b5d0153058220f2ea1_JaffaCakes118.dll
Resource
win7-20240903-en
Target
07d1813775db45b5d0153058220f2ea1_JaffaCakes118
Size
109KB
MD5
07d1813775db45b5d0153058220f2ea1
SHA1
e77021bd801cc0d457eb1952694e7d1339f3d70c
SHA256
d277c1022058d7e93fa560eb9a291888c333ea4521f766d62f557c8869a4624b
SHA512
0348a42d80c580c03286c3803a4ec0b6c63163cd3e5f67e714be8eb6249a08e41876825b4b1afdeed72a2ccd820f6bb2b8a63c006783011409a7ed1f11c1dd73
SSDEEP
1536:SQclh8MIwu5+oYarzd4txzKjYbz4xNLpirfqMFx9vVYWnJo/QGF37wr:ahdIw/oYWzatxmUsxNLefr7emG/QGBUr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07d1813775db45b5d0153058220f2ea1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE