CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7511dad8ad5f316aad2f1901a665caac_JaffaCakes118.dll
Resource
win7-20240708-en
Target
7511dad8ad5f316aad2f1901a665caac_JaffaCakes118
Size
4.1MB
MD5
7511dad8ad5f316aad2f1901a665caac
SHA1
e8c49a9488cbf1c42b193190b2cf954076e70841
SHA256
ace4f2aaae8dee282c7ff45b79369ea4e83700fc93e48d5f48fdaaf4401ec5a2
SHA512
8fc1c9e0e4c5f9d2700f86cbcbbb6197e6674ff7d59ab3aa13f44a63bf44322ee84d58e90182c321da2383255596dfbe85397e122e66903ff30452c2cf61755b
SSDEEP
1536:k0o2N2owFL0rR+MXO2k+BWy18NS1eUqTLtSKZ767DfF+ik5IrDr5ekwP7:k0o2NhwSrR+v2jky+SwUGj7IkI3rAP7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7511dad8ad5f316aad2f1901a665caac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE