CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0d8cd6a43c8ac6a4662b09fcf4df9ff2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0d8cd6a43c8ac6a4662b09fcf4df9ff2_JaffaCakes118
Size
139KB
MD5
0d8cd6a43c8ac6a4662b09fcf4df9ff2
SHA1
3fdd64e04d0695bdf3f2708f101c21ea75a888c3
SHA256
1722cf41e310d3bfab3f4e2ef25d78908bcaa57d3d6910a7d6804c44c5f45436
SHA512
00f574825adf95b1b912223a93795371fe5620fc693e4ca04a26d60456ec46a973b6c02ec4b2bd73bd8426f1a0cb7937318be024ddf877cc526316344ae4d0f1
SSDEEP
1536:1cwwwHj95OW6JripMsXMrGsueVebEAXs0gvMruAqghZoykUX:1ZbOW6BsXMnueVebEA80gUrN5ZuUX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d8cd6a43c8ac6a4662b09fcf4df9ff2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE