CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a5d716d4614dcde544659be29102691b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a5d716d4614dcde544659be29102691b_JaffaCakes118
Size
129KB
MD5
a5d716d4614dcde544659be29102691b
SHA1
aab6d38373653d9974e6b3bf43b1a1af3a991080
SHA256
36f43c313c51bc64d1377d60b105694592e1704a444818a8407b3978029534c4
SHA512
48922e745b0f6063e04b3e24d149109fddd45facebb2c867d725027e08428b448b8a203ad06a672591d7f26baec586732fbea39056c5c102f6012f84ca54f0f9
SSDEEP
1536:MDEFUawhF/H8fONiASvfNjVvxRTaPCj3MJujgap9PQjQy2CSk:j4D/cqSvf9Vvx9a6j3Mqgap9PQjvSk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a5d716d4614dcde544659be29102691b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE