CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aa86f5931551b8755e13efd5fd1f89b2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
aa86f5931551b8755e13efd5fd1f89b2_JaffaCakes118
Size
97KB
MD5
aa86f5931551b8755e13efd5fd1f89b2
SHA1
6e0c032d0fd321bb9902524831e6c3bda201cfcb
SHA256
9f00371df9f62a567d99718e6d341aef302039eb37e88900bb2819175e1af24f
SHA512
8e6116a2ef2a30bb98d3e3e06056d2f5451687a434652cfef2f4039be1a17a9acf7a760dd5e1c458028520c89c9b8bfd02e890ddf023316985fb652f45e3f230
SSDEEP
1536:OVcGVEtjXCET3ZvS9qPhg1SgpscX0P0W5q0kIWuSd5:Wc1jXTTp3Phg1BpWPj573V6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aa86f5931551b8755e13efd5fd1f89b2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE