CancelDll
LoadDll
Behavioral task
behavioral1
Sample
15479606b08fb7a27d01f0546a1a6959_JaffaCakes118.dll
Resource
win7-20240903-en
Target
15479606b08fb7a27d01f0546a1a6959_JaffaCakes118
Size
93KB
MD5
15479606b08fb7a27d01f0546a1a6959
SHA1
d4d98ab7deca4d160578dbe3a45604e83f613db5
SHA256
6dcdbf8fc0a424589078c77925b41352ca50dfe056d4f8cf23e02073e7e3d23e
SHA512
259fa7905d7df74b4b1a45755c6bb92fa2d1a64998bcfd8098e5ce3728aabf52ed1e682ff948f51b209a4f772b6710b016d1187053bbbcc9ccd9deb0982d1ec8
SSDEEP
1536:Zn4Mi33LS7enDxB+8K1XIDLMcViF5fSoXrVOw41uQlR:Zfi3b8enD3dIO4cg5fSo5Ow41uQz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15479606b08fb7a27d01f0546a1a6959_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE