CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a41e1504b1cbeac3bbc65d7ec0a03730_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a41e1504b1cbeac3bbc65d7ec0a03730_JaffaCakes118
Size
112KB
MD5
a41e1504b1cbeac3bbc65d7ec0a03730
SHA1
51c637e3fa8690204de5f20e704ce5e2ffc05473
SHA256
b6ac8cfede256d4a6446872ec7715f8cc5f17b975d41e2a66e9c47ff61f5d854
SHA512
5477a2cfa24f74854317b733dd153c8949dfab9ddc4f1cab9a7dc7a4e1d4b345ac5c81b661297fbf2c8239a156d4a5c6dd528bf93f82b39ec35d366a6bc05149
SSDEEP
3072:QP9hwdmPnWqcLmis+HpAUbUIbldH7OZoe:Y9ydmOqcLmoHG8UIH7goe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a41e1504b1cbeac3bbc65d7ec0a03730_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE