CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a51d11ddb866a154d83e0d154bbd34e5_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a51d11ddb866a154d83e0d154bbd34e5_JaffaCakes118
Size
107KB
MD5
a51d11ddb866a154d83e0d154bbd34e5
SHA1
8d6bc6a337af39e80bba30329aef4c732d8f7e1f
SHA256
1f59eddb767af4ce3f026dcb82109fa632e485385b96121fa3143ec2a8bb3f3d
SHA512
f5d974b411b6dab7f2cb1765349e5064a59e0efde2e351802fe07e19fb244238a1c455707c4da4e7ec6bae2d6397db70814a1914dc5d707339055e9581fbe8a1
SSDEEP
1536:YJpsqgQUNFs/L3BBJn2Sqxlx+cvaYAUwevXnSXOqNzUkikIKsZlI:YJOqgjs/L37Jn20qaIpnSXOUikIKsZa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a51d11ddb866a154d83e0d154bbd34e5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE