CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a34e7719536b1f31849782cf9e936a3e_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a34e7719536b1f31849782cf9e936a3e_JaffaCakes118
Size
89KB
MD5
a34e7719536b1f31849782cf9e936a3e
SHA1
6796771202e2c99329f0f2976b04b864c598bdd1
SHA256
69ac7073128a53573f8f836c930eaeaee1db9e2424e7378e7c570cf2cc2c390e
SHA512
40823c4be5fcd3de38256e995f04bc8b81c3cf311ebbbcdce474f421b9567699a36be4c89bfd3b45c1601b55a3c27d4c1455ecdecf799d2d441e0d45d5469354
SSDEEP
1536:xNWujxA5EY8DwKtn6rc7k76DQL7Mgs9HeId:u/2Y80yng5qZ+C
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a34e7719536b1f31849782cf9e936a3e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE