CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a3f58ed42f8be5c3832c6e8a2f52e16c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a3f58ed42f8be5c3832c6e8a2f52e16c_JaffaCakes118
Size
99KB
MD5
a3f58ed42f8be5c3832c6e8a2f52e16c
SHA1
049397442426d5fc77b43bdd8b93e532d0ddc1eb
SHA256
a69b5cfcdc13db918e63977cfe7e3ad61583f66b73c89c2f8f417307cf9505e1
SHA512
537a5892c8a50fec29935e0af640f870b94003e93fb4170cd9fcb6d051b8504a8c162f9b65eca2fd37afe7c7612e1dd74ffcc6aefde3cd09389bc507e180361d
SSDEEP
1536:LmSQNbJE1vj8gDxkOAdJCidq7FZoJQiv2lz7qjBSpDy:LmFty1L8gDyOXidqn8vKzejBSU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a3f58ed42f8be5c3832c6e8a2f52e16c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE