CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a3815d338e50b5d5f78d69c8d5df73b9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a3815d338e50b5d5f78d69c8d5df73b9_JaffaCakes118
Size
101KB
MD5
a3815d338e50b5d5f78d69c8d5df73b9
SHA1
a00ba0fdeba7d2d6775bf526d666e4e9d08fb552
SHA256
fb98de13557941459f6f2856cfceab25041e4b4df5506ed62e4d9af8987a0b5b
SHA512
ef921b7b5b534961ca33ac860a7e36167facb5e4cadca2e09a6abfd0da5a2d566acb6ce913d8d190f356b8aeaa0f3724cd22920f4a0b985274332f675d2b30ca
SSDEEP
1536:INWujxA5EY8fwKVOmAFxvJDroLP1bN8VWTbRsp0J5P63We2:x/2Y84COZFxvJDroDP8VWSp0e3N2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a3815d338e50b5d5f78d69c8d5df73b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE