CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ada1e4a7f0919cc4b84f48816651231a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ada1e4a7f0919cc4b84f48816651231a_JaffaCakes118
Size
101KB
MD5
ada1e4a7f0919cc4b84f48816651231a
SHA1
f9d90e941cdd9c503cffc4f23ba1cfc66b1f09ad
SHA256
1bd83533fe9bd08fb53fa1658f667eab8ca45291b3056666688eeb3671158256
SHA512
202885ebbf56f4a12510e335dfe2f338f80806bc446a7f2fdab88bb7b9b2b41ef905ea3844733256639cf20d10815cd841a1a03a3cb5d0f10605a2a0fa27e463
SSDEEP
1536:TD6K271gp7DXHQ49AGxGEHBwSvFsctQ7KZMPDnNJ5NcjDsB50:TDGYLwwbnBpDq+ZMPDz3cHo0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ada1e4a7f0919cc4b84f48816651231a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE