CancelDll
LoadDll
Behavioral task
behavioral1
Sample
acfa07e884862aba0f92a73d69ed2655_JaffaCakes118.dll
Resource
win7-20240729-en
Target
acfa07e884862aba0f92a73d69ed2655_JaffaCakes118
Size
84KB
MD5
acfa07e884862aba0f92a73d69ed2655
SHA1
22265cc597e4359b3c01d83071683a537aa89439
SHA256
8bb57db00683f384026ce9b10ff357d6095a29e2f5e990cce03593bef299988e
SHA512
ba5592dc48193317a6ababff8baa2b36f0ed664529612ee89c4484a4c392d1b3c68109f55183b3627fc9a4628b835d5b78bfe56323255dd842974bfb8575e2c5
SSDEEP
1536:mu1sAE7XCLGxxe/uC69MZlNvw6i6hX6jqxSA3lzrK9qmMLIu0c:muXE7XCLGxxeGCjnw6iS6WxSg4qmMLIQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
acfa07e884862aba0f92a73d69ed2655_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE