CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aaac0d8a7ad59c59758f61bf526c4c30_JaffaCakes118.dll
Resource
win7-20240705-en
Target
aaac0d8a7ad59c59758f61bf526c4c30_JaffaCakes118
Size
132KB
MD5
aaac0d8a7ad59c59758f61bf526c4c30
SHA1
046d693325beec6725f8e01012c4515d109edc2d
SHA256
7383f8a5ef35f4f830d8e21bdead59b83004113732817d659d4cbec9068a18df
SHA512
23de716d7a59572320de5b5226a718d0999d9751df0b17cf28f8b43e6f33a10074d64180aa131ee764f7832bbfce31805ff66372e636c932e7099601bda77c8b
SSDEEP
1536:AHEkUaLBF/H8XEE0o8J4MOX5WYQ/dLv09Q6c:vEj/cXEEEsAYQ/dLh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aaac0d8a7ad59c59758f61bf526c4c30_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE