CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a2fe344ffa9cdd26ae9526e1ed424673_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a2fe344ffa9cdd26ae9526e1ed424673_JaffaCakes118
Size
96KB
MD5
a2fe344ffa9cdd26ae9526e1ed424673
SHA1
81fa23738e8ee00adceed8654ad45745aacb285c
SHA256
d6a7e930e25a4f43e114b0d7ede9358bf81d6f4b791f9ca1af113b2d1c10435b
SHA512
e1b94b1cb31d87868e08ead9642f2c8d00992957e924c824f7ccf743ff34862f4c53af75364a8ae4cce198bf51f1e2776ca5e0f13bc71477db45669aabacf398
SSDEEP
1536:TD6K271gp7DXHQ49A469fEFhLT0551teqdVSQgIkots+v4VDRuM:TDGYLwwqpEvT4peqdMJoDv4VDRuM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a2fe344ffa9cdd26ae9526e1ed424673_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE