CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a57fc186b647810c21611524f2c6adc4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a57fc186b647810c21611524f2c6adc4_JaffaCakes118
Size
92KB
MD5
a57fc186b647810c21611524f2c6adc4
SHA1
e9a858470b350505e688818744fd598f10df6005
SHA256
3238f7732c9b442c5f68e938b35bfbbce7735b295a9e4cf8c1cb1866e1a3fe16
SHA512
8dcc67a67223b625e8e4b4a425a45da5547ae6a32f711f7181f70a7f713e87bcf2bd307f34bb69babc3929047fec5856b547ead7d066ec2c163ba77a3037f347
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8SPVc7T3IyErQ1w+d5wvot56YUP:FfUxhDtZp8vIdCFmc7sTQ2+Ti665P
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a57fc186b647810c21611524f2c6adc4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE