CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ae3c3acff3b618737f12d2414b9168d4_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ae3c3acff3b618737f12d2414b9168d4_JaffaCakes118
Size
114KB
MD5
ae3c3acff3b618737f12d2414b9168d4
SHA1
2395cc069a918a5463dae980ebfe950ba86e0db0
SHA256
b6c7a323a3b45605b50fa288fadb263983b26c79f78dfb7ee9b705ce26a14c77
SHA512
2952b260d3afaf2750e3f7ebd0d4633a2c85062d146c4f408367c8dfac2ee1d7b978328610f8a18017587ec1064fb82935d64c33881af3ba01ac521e71512d46
SSDEEP
3072:B3wxV33rCtqyav6E1YcywocVt2Nm7GdQEYNZ5:BgH3rCtq9yEuEBttGdQRf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae3c3acff3b618737f12d2414b9168d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE