CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aa0f58b64b6ac631c8a1f65194ece800_JaffaCakes118.dll
Resource
win7-20240729-en
Target
aa0f58b64b6ac631c8a1f65194ece800_JaffaCakes118
Size
112KB
MD5
aa0f58b64b6ac631c8a1f65194ece800
SHA1
9ad24f11c8618909da9a49a483eb9c386b956217
SHA256
af30bc785ce31f54c7959234ba8e66b32ddd17bbaebd104ffa836b08cf4fa3ad
SHA512
6d352174788ea4893d74b71b41b77bd87e14550f269f445f0e3dc985744728b18aecbc13e3e4814e2e1b446bc3746a6500684b4f2e1154d5183bf2edc9136587
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqcF+c5ghyUHxc03HcrO4vQZBaLAGmQ7Xui:l9L1xm6hpbVcclbUUOvBWAGmQ7Xui
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa0f58b64b6ac631c8a1f65194ece800_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE