CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a4b9de7a8abe997883e6b7be7c67633e_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a4b9de7a8abe997883e6b7be7c67633e_JaffaCakes118
Size
98KB
MD5
a4b9de7a8abe997883e6b7be7c67633e
SHA1
d715e726404a72f10947c3dfd7dcc5e16a1fed5a
SHA256
22027e7e3814e9214a74b6b8ddf4f57cc7832f9948482b9e83086fad10e2de12
SHA512
8eb5244273c7f6128141bd379fc5dadb0b3134f356ebdce8fb9e16db3d52f0819779b918ecb8e3f894cb726645cae3962ecd628263992a3f2c8ed18879862987
SSDEEP
3072:PsgO3wbPZUqbQV5GVS+tFDKjQRgOfUXjW:P63qPZUq2wSaFDCQ+bjW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a4b9de7a8abe997883e6b7be7c67633e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE