CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a992f50678b7b56133c6397316f1c8eb_JaffaCakes118.dll
Resource
win7-20240704-en
Target
a992f50678b7b56133c6397316f1c8eb_JaffaCakes118
Size
94KB
MD5
a992f50678b7b56133c6397316f1c8eb
SHA1
902fe0ac878ad8cf8d2e939b189b1d69d0c44d89
SHA256
cb2bd97bf5f2b57a5e8146854961fab9311927be6b0addb41ebb71eeacd248b5
SHA512
5d0fdef963ca6debfdfb9ee9b8933d51f7588fdce82cbd686c2bb9d18175bb365102d672bcae6b174b78bcb489b7c3c944187ec243b0851119905ae6587a0d88
SSDEEP
1536:SM9jsxvhBfnjKvOi4Wd0CwAr3AfTQ89LoO6Fv9cnlT5/6KA0WH1c0o:3jsxv2vD4WdFwADA7QQLoIlTW1c0o
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a992f50678b7b56133c6397316f1c8eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE