CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a44617bafdb3fe829203799119b0aed6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a44617bafdb3fe829203799119b0aed6_JaffaCakes118
Size
124KB
MD5
a44617bafdb3fe829203799119b0aed6
SHA1
b245a1b4c80ec2fef0db02c0ae35aa016093bdc2
SHA256
97a82e5fb0a2634200fde0f2863a6dbc85716d91f89378bc3263d93ca5341a83
SHA512
c07a6a6f30aadc6edaf2403aeb49e288774d294c71843aa8369f2c326daea7045453a70b022e4c2a300a4c0b08963a29d4d18706f7830743e903bfa93a05d3d4
SSDEEP
3072:l9L1xm6hpbVcFsRZDobwPVwR9333+wego8uw:hnhpp1nMbwPIOfvw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a44617bafdb3fe829203799119b0aed6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE