CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac1f25ae07811c65a7b5d66a03c3da22_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ac1f25ae07811c65a7b5d66a03c3da22_JaffaCakes118
Size
89KB
MD5
ac1f25ae07811c65a7b5d66a03c3da22
SHA1
d8743b9122034caf335241e3c5e015d5f2bc7ec3
SHA256
3e83364c3042e96d35ec2a63330b37e3e2d9aa86d256549fa732777b00e5ac84
SHA512
ae1afe558030b1703d84bbe4cf96d9dd4816736eeea84a4e78398e6ee0b5c0c3fea3786a6ace883b56706e57f4f9ebadf2eda329bf9bd4500884fa8eea4b53ba
SSDEEP
1536:2moLIIWdNE9jv4LsBgIYRDgmYBQKLJPWTlqE/Dg4XmnH+:f2RWdNEp4Ls2tRMLhW/rg4XmnH+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac1f25ae07811c65a7b5d66a03c3da22_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE