CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ad0115c6f9d46b6f186cfe45be4ded75_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ad0115c6f9d46b6f186cfe45be4ded75_JaffaCakes118
Size
91KB
MD5
ad0115c6f9d46b6f186cfe45be4ded75
SHA1
eef62d2ba16dc5ef577dd45b28f2c315678e874e
SHA256
6c219a7122a2a2bae67f5daf8c11e84361317b5a0ecf6a3de54c1768a1594043
SHA512
16875402b62eb2b2876328db911a8dca0161a3f297c6d3432cd80c0d29bda9b4f699b839dc003165134737e07b1aa4645bb225ab3fccacd05cef796ad0e0785b
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCLhm3mkaxICKAiL3cb6WZF2w9yPUZoLA:Ud5W8kw/jdt9YDJyCLKmvxICKAWcb6Wb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ad0115c6f9d46b6f186cfe45be4ded75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE