CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0d6e51a1817a175048c6e716c5286885_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0d6e51a1817a175048c6e716c5286885_JaffaCakes118
Size
87KB
MD5
0d6e51a1817a175048c6e716c5286885
SHA1
496169de03e18ce85a9c035b639d9d0d53521556
SHA256
99c2599d9a8ab12d35bb6d8ce4294f6674fc863fe22e5c41d252c21a4cc3b484
SHA512
d15a4c408443f48b1b35a3ed0d54abc97ba421cee483bce29890ee4ccb9242571925c3d9d6b2d4ddbc40fa3d51071b4d9e22e7e8ee4e8aaa2403bfc8892942d6
SSDEEP
1536:SAVJ0mWeB/iU9uKi4ZNl6Ax/gafrmDdiz+p5DKBK:zJ0mW8/i/I6w/gafrmJrp99
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d6e51a1817a175048c6e716c5286885_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE