CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a5539ce2be51cf74cee214ea143098c9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a5539ce2be51cf74cee214ea143098c9_JaffaCakes118
Size
2.1MB
MD5
a5539ce2be51cf74cee214ea143098c9
SHA1
728faa98a34a5e13d85dcd97a4be733a773c1959
SHA256
f1448cb88ab97066df194a76f81f87e1392551af8821259d521737df313a79e6
SHA512
0929cee30b781e24ebb06719ae08d9c96f360a1f5d160c85022400d5d0cde5cffb1881c6e2579f1f20cb0aea1b01053bdd420b7d2b99965640531969de05b2e4
SSDEEP
1536:Wvr2owFw9g2WK+MfoeLBtHRs8EiF3ANDxe62rV4dK9DBP19XbL2J:Wvrhwea2T+leLvHRrthIfK4d+DH2J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5539ce2be51cf74cee214ea143098c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE