CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a15090b9037dabee8ab338b8a1c2c5da_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a15090b9037dabee8ab338b8a1c2c5da_JaffaCakes118
Size
99KB
MD5
a15090b9037dabee8ab338b8a1c2c5da
SHA1
9c21b4ce32e1974e3489505600cfa82b177e31a5
SHA256
b3b768cecd9ce51057ac0e3033b03a7491e72c07101df336c1e2297c0b74d4c4
SHA512
4ecb085ec138147c28b84904db012dd2ff3db13a1285d5b70957a6f383773173652ec83f6e3efa5884d7b1e715e3ef3b8143a931e2769dc7842cfad5c7298cf7
SSDEEP
1536:qWNTI2j7IGPmy5guIRp826BTBbj1kVFZrydNf7komkJ2qsF:qWNTHTey5HCW1Nj1kVFUdNfoob4qa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a15090b9037dabee8ab338b8a1c2c5da_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE