CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a71988c6e4dbc6346ab9eae89a406092_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a71988c6e4dbc6346ab9eae89a406092_JaffaCakes118
Size
99KB
MD5
a71988c6e4dbc6346ab9eae89a406092
SHA1
7eb03aa43d965919772583920ae6c722406d2c1b
SHA256
3574ece3e5fa2823a90cdd952215b45f37451cec01f27d655ae75ebb8c2c28ce
SHA512
79e535e9a496d041a6b591234d308f0b44e71ad1b6f62aa0632a0bd58fbb4864b6746a828d455f46551457869a88508b9a3464e1bb6ad13f5025c9e442e9350d
SSDEEP
1536:/xLK2OReR3CH+diwDExI0SYgBi39Kg2S/VvgXnSwjNAZG:ZVOReRyHs/DEG0SYgBiNVlgXX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a71988c6e4dbc6346ab9eae89a406092_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE