CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aa1171fd98b21779397955c4361ce0d4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
aa1171fd98b21779397955c4361ce0d4_JaffaCakes118
Size
136KB
MD5
aa1171fd98b21779397955c4361ce0d4
SHA1
0ed3fba0f8461525bf860b28f279586dc2d5152e
SHA256
02b26fa7f2acdfd4055719039f35a25fec31a11cfe0062be94e5d7bfc124171b
SHA512
089513f6f282cb8a6dbd4a1b37979bc61054b90e37f2921882a85f6d228f6b77af45bb1e27c58724f147ee49f71e29e6d389f0aa2a6a169eea1b3834e4cee152
SSDEEP
1536:MDEFUawhF/H8fOpMQUxyxzA7GPBNFWLoZsVTFxex+OdQMlrN:j4D/cCLUxyRkGPBGLplM+OOaN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa1171fd98b21779397955c4361ce0d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE