CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a7de7d61e958aa75b224f4099a0b7224_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a7de7d61e958aa75b224f4099a0b7224_JaffaCakes118
Size
114KB
MD5
a7de7d61e958aa75b224f4099a0b7224
SHA1
2f6f7e39541d79020007ffb5907987c2b76f01b0
SHA256
e7034f88b3fcbf47a2979f00cf0e98e08688747684f60ba9f62aed6155d167d0
SHA512
674ffb76d12081a5d6f9d9449ed3590f231cf6fbbdb47bb2a939ea437cd3554cd897cc77f8d0438dbf440468c36f35e5dfbbda0b333259a04968fbddecd3b2c7
SSDEEP
1536:4LBoPFjBxU+TxvkYb5e9f9N3OMhuTr6ceTMQklkBjU5ZofhOvVPV3:RFjBxR1kYbYfPzhuHUTylkBY3oAvV1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a7de7d61e958aa75b224f4099a0b7224_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE