CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a22824962e8a6a195208741d3629d1ee_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a22824962e8a6a195208741d3629d1ee_JaffaCakes118
Size
98KB
MD5
a22824962e8a6a195208741d3629d1ee
SHA1
21dd77aa89847c1a3cbd2a9bf8315929120a6046
SHA256
1dedcba211ec18da70e488f8a652e9f1e872a20ce816219086cef352b4825827
SHA512
e8ac09dbd3bcb0c35784c74fbeecd9e03025fef6cdd93e6d02ed994c246c676bdeda4ee75e0dfe93f869ccd2552f3251d3ea08c295f6a418c4f1a11fdd90974c
SSDEEP
1536:JVGqeHHrjdj9qckGJNYnaXfSBOrghfLASC/2/K0od4Taz83uU59ByrUWh:JKLjdjAck8yaX608NcfsRouTfD59EN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a22824962e8a6a195208741d3629d1ee_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE