CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aac1f151ec8993bcbbbc97f99030ec3a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
aac1f151ec8993bcbbbc97f99030ec3a_JaffaCakes118
Size
115KB
MD5
aac1f151ec8993bcbbbc97f99030ec3a
SHA1
3ace49edb9b23d85af2d7176dd24e36bf273f7ec
SHA256
497f3ecad0f5d4672de1c2349a63745b089ee761b6c858f8506dc425c9aafdf6
SHA512
dd65cef87c947ad16e32858b12c2d36bd9196aada434876b222d6fe20f505cf69cc098220ba548f160de077f3a3ca401bf18f85eaa98f25eccade3b5a906b2a6
SSDEEP
1536:RzL079679wrPGWBAyxl62BO5s6seB07LE4hQ74PVpXBLD95TjUR:RLm9679ePtHxlDO5s3ekLj5Vpx/91M
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aac1f151ec8993bcbbbc97f99030ec3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE