CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ab5a29b6989c7036fa32548e6b6b4187_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ab5a29b6989c7036fa32548e6b6b4187_JaffaCakes118
Size
108KB
MD5
ab5a29b6989c7036fa32548e6b6b4187
SHA1
2ef5ffa72c7ad1ac100c125a28316728b995bbcc
SHA256
f7cb96e5b92d42d1f1e52729f06e0d50f9022aebc2a9e8617b46cff42685d29e
SHA512
e855250e50a20fe597b595c83e7837e1ad5779872efacbc9d49c6351f8fc0721f5b150f91e07b14451c4fe5afef74bbc9b7b0dbf225a259a473e42a39b799066
SSDEEP
1536:zMHSIHT9yM8vKO4Sq8K9fJPMakxpGj9YEiOYunJpyLJTPak47oivv:z1QT0hvKOrYfEDGEOYun6BPs5vv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab5a29b6989c7036fa32548e6b6b4187_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE