CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a1ca2a597cd4858441bbf1102b502afe_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a1ca2a597cd4858441bbf1102b502afe_JaffaCakes118
Size
112KB
MD5
a1ca2a597cd4858441bbf1102b502afe
SHA1
12f20f8521f6534c76d6cfd55f53c5cb7e56066d
SHA256
a8ab416f4c784bf0f68a046bdc76b5680415c7e58be7126a8ca66a1dbc506ef2
SHA512
eeb9d997c27438768434330829ece99ef0177c9dd1338b9fb14f11660df480e84684f0de1d86392d664df29491f981cacfbb2c4d0672861a44eada1f90702a77
SSDEEP
1536:INWujxA5EY8fwKVgRrMsYw8+UTOPMufbLmgCwsLlU46gRoIAchr3obPi4hG98r:x/2Y84COFemLmgC1ZcfIRjAG8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a1ca2a597cd4858441bbf1102b502afe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE