CancelDll
LoadDll
Behavioral task
behavioral1
Sample
acb8d90e0cd94fd587dffb8a1330db49_JaffaCakes118.dll
Resource
win7-20240729-en
Target
acb8d90e0cd94fd587dffb8a1330db49_JaffaCakes118
Size
102KB
MD5
acb8d90e0cd94fd587dffb8a1330db49
SHA1
f8446b97671a668723118f4cf6142b07a6e106b2
SHA256
a28f6276dd3a47801a95b31b778528b6e5cbed8dd9fdb8c3b47fbf3595932bb5
SHA512
1e230560ab6af2ab0523683764a884a6e696c011c69099de1a519b83fce41a099d978de3c03b4828ed7b1d23ae54316bd87326ed1cc53b8bb96b1c6543b2672c
SSDEEP
3072:6SFMDgVswFLdNPm3PCoTuVyZadyCewWkdf:6SFMDgVs6BNHyoHWk9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
acb8d90e0cd94fd587dffb8a1330db49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE