CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aa70d123838f2ebe84d37f72ad150d33_JaffaCakes118.dll
Resource
win7-20240705-en
Target
aa70d123838f2ebe84d37f72ad150d33_JaffaCakes118
Size
105KB
MD5
aa70d123838f2ebe84d37f72ad150d33
SHA1
08969ebdfd74c5ba823de7eeca1bd5204ec44a42
SHA256
5762d25b37a8c97a7fc0eb2bd8771f8436b482b74507e9a40a8fefcb39a53575
SHA512
daca36d03fed6d8641e7991c70c94598102df702a9b9c4f9d4a5ffc4a6d2815cb6b56cb54483e2ff1bc7642eb862db054ec1883602adfa31dd24826be15c716e
SSDEEP
1536:ovrZ4PVdal26fErcOyF8FXMuHsfB4oY+GvZ6L0RUddykDyoSj:OUVdIi4dF8FXMTfuoY+cE06rD+/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa70d123838f2ebe84d37f72ad150d33_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE