CancelDll
LoadDll
Behavioral task
behavioral1
Sample
52c6efb6c98fff81b6bd08529552242e_JaffaCakes118.dll
Resource
win7-20241010-en
Target
52c6efb6c98fff81b6bd08529552242e_JaffaCakes118
Size
108KB
MD5
52c6efb6c98fff81b6bd08529552242e
SHA1
31ad9075d817f1d07d020c9a58807ae5e7975c46
SHA256
f7bfbe43239df32ca519e652c74971ae98e9c3535561699fea53a783866f5850
SHA512
1868e790bde0e40015c82c676206f44056c7588e709cb9abaf91c36aeba86a851826df2367ae371167a4e8c28f249726121ffa417eb07d7e31f3b65b5907b6f9
SSDEEP
1536:QPHd2owFn+G5mAGHnWauNWRp8x/9+IHBfXkv4cNms4/FkvmcGCPZr:QP9hwdmPnWgRp6/9x9cNmb/6mcGqF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
52c6efb6c98fff81b6bd08529552242e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE