CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ae6b8597c967393ba2b215d51137d246_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ae6b8597c967393ba2b215d51137d246_JaffaCakes118
Size
6.4MB
MD5
ae6b8597c967393ba2b215d51137d246
SHA1
b1e9efbf7f97fc4bd5e119d285be04074e14d4f8
SHA256
816a413cfe4bb69d3134541eef026bc75d0804b29d2803e78a0376efd7c6a47c
SHA512
ada5e8de5d41da14095d4405bdb5501663934d1e1db544baa070e59027f66b932c529b1c1bab213bdeaab3dff937129d5d96b70ddec0b180c7ed7a693bb5b40e
SSDEEP
1536:+wRmhQ/5xJ04CK2bu8wVBsry7OD4Fa3CfOL5NrTwDcRUi:+wRhw4CK2BaBsuOD4FaSOXTnRH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae6b8597c967393ba2b215d51137d246_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE