CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a5a0caf8a8a88280e68e473286c27aaf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a5a0caf8a8a88280e68e473286c27aaf_JaffaCakes118
Size
87KB
MD5
a5a0caf8a8a88280e68e473286c27aaf
SHA1
7ccad27f224a05994ed1cb5a748388be9a398b55
SHA256
f544703bdf350e2360906b0f0d9146daeebdc212f73d409b7d0718e459bbc44b
SHA512
c9d40734ea280103fbbeaf59ed299b7e0baab0e642d9d61a2b9ca270c2c1db1a0d07c4ba56da71cb63b49b802aa4a4a4247f28cd7a8c9783da71a7804e6de0d7
SSDEEP
1536:oCIHAdq3SbklcbD/c/HxQwN6sFlNE3GdmuZZeURSYB3:oIdqCbk6bTuQwN6sFl0GYejRS+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5a0caf8a8a88280e68e473286c27aaf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE