CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac5d9c76e18cf0c71033a631555f162a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
ac5d9c76e18cf0c71033a631555f162a_JaffaCakes118
Size
106KB
MD5
ac5d9c76e18cf0c71033a631555f162a
SHA1
7a4f5e378f1a8e8f4df81c5767e3b770aeb8cefc
SHA256
7bf8c2cd7b58e1aef20b308cb9ac7f1bace180b5b61c6a70fe8ae3f93e2b1de2
SHA512
8022133c3d66690cb7b8146797ab144d69b454dd44e58935b2aa5f587b652ec091b833221b54e0098ca53513d08a85cc52b7d3a0139aaac1cbcf1cdfb3dbb613
SSDEEP
1536:/xLK2OReR3CH/ArbuzZCFfrs4GeHsXooI1qTW2sf63X3qe:ZVOReRyHYrOEfuXoxqTfsfil
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac5d9c76e18cf0c71033a631555f162a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE