CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a49ea5480b83f7dbe483dc08527a7ef6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a49ea5480b83f7dbe483dc08527a7ef6_JaffaCakes118
Size
87KB
MD5
a49ea5480b83f7dbe483dc08527a7ef6
SHA1
4081d6d33972f8a645ffc2d1f2c641b46a06d306
SHA256
0964d6d801f38df776bb3e092442a775a74e3c227105d15de80a24d53b0d5599
SHA512
867095f62d0e4ad1047ed12d666aab1698271d8a5fc224cc408cd746b9637b462f567fe580b19d910848b20289eccc9e863d2cf215353af0f5987d3f65ea11ed
SSDEEP
1536:zMHSIHT9yM8vKOGqPlH2ypFFb+T6yoHTML4:z1QT0hvKODxfqT8HTML4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a49ea5480b83f7dbe483dc08527a7ef6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE