CancelDll
LoadDll
Behavioral task
behavioral1
Sample
54c456ce4780c931fc14bd795b2d6aa9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
54c456ce4780c931fc14bd795b2d6aa9_JaffaCakes118
Size
110KB
MD5
54c456ce4780c931fc14bd795b2d6aa9
SHA1
173a3aa0bc86a0fdd10db0d3fbc4ab660fc10b94
SHA256
8b914fa8afe676731aaa9de881421f1e602d59ac83b51ed02da1b3a0f28fa549
SHA512
996a095f4f2674e6a30faf8642c3f5a68954028e910d59d759bebb4dfe6680ca4c544fc6322c48a88ba21dca4db60094061eb747ad58f79a61853c1f6a9bdf2e
SSDEEP
1536:Zn4Mi33LS7enDxBoxv4LEUgZcLMNL+eN0V3B6m/9DeQRkz4GQ5zSqZdIx:Zfi3b8enD3o+YYk1NW3d/9DeQRkzaZux
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
54c456ce4780c931fc14bd795b2d6aa9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE