CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a93755ab65b1526d34986f8f545e01b1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
a93755ab65b1526d34986f8f545e01b1_JaffaCakes118
Size
127KB
MD5
a93755ab65b1526d34986f8f545e01b1
SHA1
69096e3f3079c182b26dcccec608e187caf5045b
SHA256
3297769875d0ba06dc54fd4d3f4ef850473b752474e66f7414029b3538052e73
SHA512
6df936816ffc914514620e7391ee26418594fdb9ff50c597f6176b47098f17184f98136bbfb0f16c9e4ba2a770198bad4af3973b64f7f3dcc7f29ce9c0301d8d
SSDEEP
1536:RvjHssTxV4UBRkFboYNXss/1Kpg8UABazW3ZI5ZxQ:jxuUBRkFboY5s6I3m5Zq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a93755ab65b1526d34986f8f545e01b1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE