CancelDll
LoadDll
Behavioral task
behavioral1
Sample
04348099418da58935a4b6a4b9457635_JaffaCakes118.dll
Resource
win7-20240903-en
Target
04348099418da58935a4b6a4b9457635_JaffaCakes118
Size
131KB
MD5
04348099418da58935a4b6a4b9457635
SHA1
7baf2466d52b6298611c7770059e6160bb751756
SHA256
ee49b8cfcc069b7f957dc86c899262e60eeaccd3acbd0f492662d46e390f2e7b
SHA512
29d57ad8254f65747ab892369c39d2a1970c3a96f08f4aabc81af54095a4d1bdffe066718c8e36dcacc750fc8e5a64e4dbc3ff6a8e5e84c68201f767b8d6595d
SSDEEP
1536:MDEFUawhF/H8fO6bE7DrmL+yddr6uVX4AenFKgJ6sbqjgXRW:j4D/cjEDmL+yddrnenFmAqjUW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
04348099418da58935a4b6a4b9457635_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE