CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a02946778e8a0ef2d61a1e44d5b49c66_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a02946778e8a0ef2d61a1e44d5b49c66_JaffaCakes118
Size
133KB
MD5
a02946778e8a0ef2d61a1e44d5b49c66
SHA1
229a08dfa342bf72c9c8fa5cc2425ff5f1ee6816
SHA256
75848dea859b1fd35ba89f4c709906b46614dcff1a2d91b5e4ba03e694e8719c
SHA512
8632e2aaa4cbe77b596ec5949a389eaf05e7595020494d781880bb8d336de33cda52facd94c86427ef24b08fdf60521267f682399210353489cbd58adfe4b7fc
SSDEEP
1536:6Rw9k6k1FrHc5UtjuNZN4POLNhwdIjyc9OMcosH:/cHr8OQd4POJidIjyAwH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a02946778e8a0ef2d61a1e44d5b49c66_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE