CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a16b3ea1d4574d93028412a7cd5100db_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a16b3ea1d4574d93028412a7cd5100db_JaffaCakes118
Size
110KB
MD5
a16b3ea1d4574d93028412a7cd5100db
SHA1
814c5d91835e59288055a49e51e44cc982efa2da
SHA256
ca7d361727e5d62c659d6e0c23f14a7208964714cc3ab771870b9979d3349b24
SHA512
80dca99b88cde2fce6a30bcdf259c8c3f17c26de71e6652f6e1ee9347ae9781d6114a44b0db5d518fa8c85facdc719794e949895c7977dc6a00f787eedb3e554
SSDEEP
3072:Ud5W8kw/jdt9YDJyCew0PGFMqSY/PLbK26W3leI0:Ud59bdt9sxd0PDkHh3leZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a16b3ea1d4574d93028412a7cd5100db_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE