CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a1708a225b8978aa7dfed9d7ac94780f_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a1708a225b8978aa7dfed9d7ac94780f_JaffaCakes118
Size
101KB
MD5
a1708a225b8978aa7dfed9d7ac94780f
SHA1
570e4f1a005e6c00e1f81867f578d0d284f538cb
SHA256
7783b48b9c5b233f2ed45b85dbf677e497bd906d459bea16e63ca59f44fb3246
SHA512
71e3dcec08b986f890d943129a76339896e5b0a080427acbbfb7873d915c81226fb8a6231f4fd66ebabb9a5cf37af83300244130f5db27e7dd7bb81b28488611
SSDEEP
1536:TD6K271gp7DXHQ49AiyigwK32C86YUpB/zLXK05QBc+YYc:TDGYLwwbyipK7YUrFQBc+Yt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a1708a225b8978aa7dfed9d7ac94780f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE