CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a1b9ad6879b0a57530848db5d9aca64c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a1b9ad6879b0a57530848db5d9aca64c_JaffaCakes118
Size
92KB
MD5
a1b9ad6879b0a57530848db5d9aca64c
SHA1
eadd228ae8c80c8c2c8e74746d8cf6dcf535e811
SHA256
e47a4053eeb6f83d134b41d4430e7d04a847bf65189a413917ecf2a709f150fa
SHA512
e6b8b78ce3c5c2eebb68820e6b4f177ddbfa60ab4c6eec48b0b0591b1b853b95ca2b11367c3a36f01a237ecae27f6def4b0ef35ec7417f9b7561a5f0e320f186
SSDEEP
1536:LIuBbJUd3hLZDuruMXU8MAWC+2LGdX+U1etl/i9X1E28/BZSRbhlIbrR4Dh:chdxwquU8MAWCx0+Usb+KBYRb4R4l
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a1b9ad6879b0a57530848db5d9aca64c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE