CancelDll
LoadDll
Behavioral task
behavioral1
Sample
26ff40bcbc8e9534e57fb5b324dbb85d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
26ff40bcbc8e9534e57fb5b324dbb85d_JaffaCakes118
Size
100KB
MD5
26ff40bcbc8e9534e57fb5b324dbb85d
SHA1
fdf469a6d72d1d6c85a7c5a90700b82f7f8d1cbc
SHA256
3796e362d9f077ae889ef0c89394e61342fb76da0bb3393bf2f9899fa385b9ea
SHA512
a4236aea417a011ed2020dc3d0dbb2a1839ff5c2eaf2cc27b0cc418601783609c5352b62938a5f64d57c78d8bfa352ecf71c4917aa188b64cb58540ffc086d42
SSDEEP
1536:0pstl9F0gv/r7r2ZPpCbMIlgkbVwCuNU0UX0x0YgzM+rzkb8s:0OtFNv/r7r0PpCbFlgkWCuy0e0Izpz8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
26ff40bcbc8e9534e57fb5b324dbb85d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE