CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0fd40edbb5858e0db7eb04ddf0b2581d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
0fd40edbb5858e0db7eb04ddf0b2581d_JaffaCakes118
Size
99KB
MD5
0fd40edbb5858e0db7eb04ddf0b2581d
SHA1
cddbe93535ae145296b9d4826643836d84acccba
SHA256
abbfbd0ebf4ff5a1eef990579be930cfd5d17cdaf8e97c39d3952caf40f8d1b0
SHA512
9b5bcb946433085a8c84f3742133de8c6c07564ed601237bf399c4441b951181402f42c5e12a2aafe1be772ff646d1d26f414d7829237cc859cfb633955e32cf
SSDEEP
1536:SAVJ0mWeB/iU9p0oSHHZNkcB1Fuc//gjtGm6Nv1U6I73+W0pfNr1/:zJ0mW8/izoSHLBldhv1E73nc1/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0fd40edbb5858e0db7eb04ddf0b2581d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE