CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac308305ad8ff8f174e21be6c5ffbd75_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ac308305ad8ff8f174e21be6c5ffbd75_JaffaCakes118
Size
85KB
MD5
ac308305ad8ff8f174e21be6c5ffbd75
SHA1
c3e4ab3096f38e08daab2b5ee141e1490ce8f2f4
SHA256
92d937ea168fec8d2b82141a024b2022bdf6106bf42ccfbbf75d4144ff8320fe
SHA512
5722f60b7d30c3a754e1684aa3d03dff718650313dcc66cb98a1000d02e1438cd2a0388f402851430d81d346585b205a0010e3ad010a4909d5851721d6fc5b8f
SSDEEP
1536:0pstl9F0gv/r7r2ZGUjRN+NJDSDuJqpOeC6PsNbjWfNF/Je4a4tW:0OtFNv/r7r0G2RwNwDuJqFCusNm049tW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac308305ad8ff8f174e21be6c5ffbd75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE