CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a433270061c9c2bcd0fd7250674eb196_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a433270061c9c2bcd0fd7250674eb196_JaffaCakes118
Size
87KB
MD5
a433270061c9c2bcd0fd7250674eb196
SHA1
9778958729f4011becfab6672b41cae37553f16d
SHA256
70aeb7fb929a66651b72b65f53a8e6a6d10776855b027cd509114c3f35c58cb7
SHA512
db083ee10b8572ece7806fb8457d1e3df5a2bd13a8efab73f549e6bf5e965da22e44b96f4772cc7c3f46c31b8915feae83f4375694f07feeb66a0ce9a68d70d2
SSDEEP
1536:YXHoPktJDJg52W0Ie4Sch3m1gO0D7bbQXasSH:cftJCL0Ie4Sch3m1eb0asC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a433270061c9c2bcd0fd7250674eb196_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE