CancelDll
LoadDll
Behavioral task
behavioral1
Sample
a9985b66a6dae944a15c485c80511869_JaffaCakes118.dll
Resource
win7-20240708-en
Target
a9985b66a6dae944a15c485c80511869_JaffaCakes118
Size
4.1MB
MD5
a9985b66a6dae944a15c485c80511869
SHA1
a317eb74ad5996f21ed80a989e7a3f66cb607a94
SHA256
244c77ee12b6211b3774952bb23b3f70e4e08a1616b56846afe036f855434213
SHA512
ba79afd853167e7c8a4b52903f7ba0f78ce8a2be7d9501e20232c70e6a6ea3282e05accfbb67efbb0dd14a17fdbcc9e7e8b550c3d4df718161df0c74ab6b6668
SSDEEP
1536:k0o2N2owFL0rR+MXO2k+BWy1c2L7OcTts0h6tQyDpsJ:k0o2NhwSrR+v2jkyj7Oets0hCQqM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
a9985b66a6dae944a15c485c80511869_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE