CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a7e84d176260a33eff8669f0fa87bebf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a7e84d176260a33eff8669f0fa87bebf_JaffaCakes118
Size
104KB
MD5
a7e84d176260a33eff8669f0fa87bebf
SHA1
76d25b8579184df212da3312ae58e1f95b7f8953
SHA256
51b238771a70a669daa3f944c5db901603643a932a837bed6192ee31e7f5fbf3
SHA512
b5fe12bd5c0ff2a4ccf5488805d2afe294506fc96b53f92ef90b495fea540ff46c4fe93445d83cce77ee93b3ad63caf7f5d009e656221e1d2c6ce175df8b2a3f
SSDEEP
1536:/xLK2OReR3CHsvljhQN5K0qDAjP4g7BN8DQ4ffxmxYf:ZVOReRyHs96N5Kc4g7BNUIxYf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7e84d176260a33eff8669f0fa87bebf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE