CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a130c333c9b83378f593c15fec063ca1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a130c333c9b83378f593c15fec063ca1_JaffaCakes118
Size
105KB
MD5
a130c333c9b83378f593c15fec063ca1
SHA1
27864ab07916c197ce36244cbd0dd6e203d23441
SHA256
95cd48abea8e15755e67a7acafe3be52252e7e433226cff1dc3d8d2e2f320425
SHA512
a4ce5b15b38624bda4b30ebaeb230c6affbcdc3bb71a07868e15ee7e0892b994735541ddf527cc44d488cda254fb63651da565527238bafedb87ea40c41e8cf1
SSDEEP
1536:/xLK2OReR3CHJgMAv33JA1itZEUs574Dp8zZ04Rmukvf4nCw1mYZfa0v0hWu:ZVOReRyHCv3ZAg8b7e8l04OYj1m+SJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a130c333c9b83378f593c15fec063ca1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE