CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a1518ce42c84b44880a8087521ef4ebf_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a1518ce42c84b44880a8087521ef4ebf_JaffaCakes118
Size
94KB
MD5
a1518ce42c84b44880a8087521ef4ebf
SHA1
f6ee74dc555a6c4aafe69fb682378bcf227097f1
SHA256
9d04e3688c0fb964cf71afcb1f94dea81d228409f2864db0de00414e459acb98
SHA512
cf399826884c92b6d81e2cd48c5fa8d7ea73035feae64bea987378aa67a891e41af9c5bf5385a3bdef3e055f2e2c0a84725478bfdb7206b8d3d0baf4fad03eab
SSDEEP
1536:2moLIIWdNE9jv4LsBgIt/6MPrX+/Z0J+vGYtUznTpYMiy1dlXBrEOvz:f2RWdNEp4Ls2MCMzXSW8vGoUznuMiyDn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a1518ce42c84b44880a8087521ef4ebf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE