CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aa1c0d262fc67bdaaf038ac63c45db45_JaffaCakes118.dll
Resource
win7-20240729-en
Target
aa1c0d262fc67bdaaf038ac63c45db45_JaffaCakes118
Size
106KB
MD5
aa1c0d262fc67bdaaf038ac63c45db45
SHA1
8f0e21cd60d767788c042584f9028db9462d5273
SHA256
0ac51fc1c955433f2a57239dc989811832ac0dcf20d3dd7ffb3d7532a976d65b
SHA512
0fde2bdcc907eb3d89df48cd4b67ba5f30a2c01bd74b1a1b252127223b90f2f8cc2bfe225333c3430887d399f04976274eabb26d22e8c260a3ff0cdc38fe6e95
SSDEEP
1536:i64W3b/+sHTUxLu/CY0J/Ma7b1miAA6dg0uKoVP2i5BIM2gCt0nB3SbLj2RD:1b/+sHCY09bDA1gGoVb27YB38j2Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa1c0d262fc67bdaaf038ac63c45db45_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE