CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a04d861239673c52162cc0057a1d60db_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a04d861239673c52162cc0057a1d60db_JaffaCakes118
Size
105KB
MD5
a04d861239673c52162cc0057a1d60db
SHA1
cbbe5d0a20c68462b9db8b8ea8128146ec9c9916
SHA256
e236e8185b0b591fac2616fb850e1d73cc677834baaf81e663dd7bd2ad6bc1ac
SHA512
e1d1de2018a4106ebf8e0a1b14ed3ed1f51197e2468946b9cab25e6894f05971b32e140fd1ea7aba4096790a0db680b39c72965b9f84418734d2c4d349346ce0
SSDEEP
1536:Gtbad8oQmjBhVNiHseQVeBHrQ8t813to2KvwcfgLTiMKQgYgZ7lX6S3rSC:maSMBhVNgrBLQ8E7Kog9996S7SC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a04d861239673c52162cc0057a1d60db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE