CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a7297e5759597682565d96d39be9dceb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a7297e5759597682565d96d39be9dceb_JaffaCakes118
Size
80KB
MD5
a7297e5759597682565d96d39be9dceb
SHA1
61fae3642d80d752071f612cad671b3e0e9a09a0
SHA256
a8c5dc337e117a3794faec925ce0dfb98ae7bcf71140622a56519324bc98a4f5
SHA512
fdf6e08f61c20edca5033fa51d2e224359b08149a2e088f271bdeeac36e2b3b1fb7e2a85d6a653f89009528dbe36b82663678c8f96594d67f874547e16f4f530
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCSRJXG2Blb5is/CZqbHEoacAl:Ud5W8kw/jdt9YDJyCIRG2BJcsqZqz7Al
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7297e5759597682565d96d39be9dceb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE