CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ac853381b25aa696e87fedc6f16b8fca_JaffaCakes118.dll
Resource
win7-20240705-en
Target
ac853381b25aa696e87fedc6f16b8fca_JaffaCakes118
Size
108KB
MD5
ac853381b25aa696e87fedc6f16b8fca
SHA1
d25446f397020e0c8c58c19e0141ca5cbaa3fbcc
SHA256
df12cd96ee6956460f157478fc6ce2db1b2172de5e31ce1feb222d3cfd1706fe
SHA512
12633065d9ef64432f4aecb0536071c623fd2e4e3b54dde12884d3b1fe434bc99ad0de07b6315427ab4fafd69339db567e723998a81feb80aa074085eb5673a9
SSDEEP
1536:/xLK2OReR3CHiyhrzGoa70Oio1LvyM7TvZiG64qcJ1OpoqJDrnIE2G:ZVOReRyHiU3GDnOATvZzVJ1ODV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ac853381b25aa696e87fedc6f16b8fca_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE