CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a00d94294c683b5ee6270d6e4631ea0d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a00d94294c683b5ee6270d6e4631ea0d_JaffaCakes118
Size
6.4MB
MD5
a00d94294c683b5ee6270d6e4631ea0d
SHA1
363bfef9c2e2dec8ffbc8c4fe012ef136db8318e
SHA256
42191cd0f8d742cbf40315f6212d8b44c3f037dfa226413270f2cd708cbeb9de
SHA512
c7858a1977507aafff5f0c56567e393f8ee8a1902376898f35ed5c2f15db64ee249cacefdd5c6f17733cd0b40468a08a37e9471ecb41c0a40335c9548ab73d18
SSDEEP
768:clFChtjDJIEcnlYI4wVx/NsN+9dO90RGv6fzFPQTJzULLLLLLLLLLLLLyIbKOe4E:OQvJIzBVpeR6fG3IbEoRS5Kl9uUUa9fc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a00d94294c683b5ee6270d6e4631ea0d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE