CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ab7c822c53db7135e88f2d24f930322a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ab7c822c53db7135e88f2d24f930322a_JaffaCakes118
Size
128KB
MD5
ab7c822c53db7135e88f2d24f930322a
SHA1
154d196d2b94c4b85b7e7a1f364751bf1a526587
SHA256
d14f903ebd669b169ca4ca40a84bbcb5932bfbcb04812af5a9ce7804abab8c4a
SHA512
35bceb9f07fb442d778becda2d0f851efddcea2439be4ee0068e5658b4385b981cce1ca078e3d516700821955c4e9264ddd21d26c4797f3331ed528409187f16
SSDEEP
1536:MDEFUawhF/H8fOS06bzIZSy0M+LwUqML1jQ/4xbM3t0WbPgy:j4D/c70UzySy01L31jQwxbM3lN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ab7c822c53db7135e88f2d24f930322a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE