CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a7c253f9ef8e11dfc9fb648b5429fe1f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
a7c253f9ef8e11dfc9fb648b5429fe1f_JaffaCakes118
Size
95KB
MD5
a7c253f9ef8e11dfc9fb648b5429fe1f
SHA1
39050cde860b3325ae9f30dc5c5801bea35e01e7
SHA256
f712541780f8437880f4c3e045d8c536d83ed2be309c522956fbc52cbeaff974
SHA512
d10188ccaabd2f5ac8ed8e7bb35ccf88c67ae8fab4d41a853aa5f237b0d75f741693ec4419a73a70cd3759e88f573f8e96fe3ed5b443c8cc4259034218e63955
SSDEEP
1536:zMHSIHT9yM8vKOzqSD8U9cUPiHoHOoawmnpFrvKuS/Jtds:z1QT0hvKOdcU6HoHKp36Jt6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7c253f9ef8e11dfc9fb648b5429fe1f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE