CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aed1628cbd83cfbfc9ec0d77ab2a6158_JaffaCakes118.dll
Resource
win7-20240708-en
Target
aed1628cbd83cfbfc9ec0d77ab2a6158_JaffaCakes118
Size
109KB
MD5
aed1628cbd83cfbfc9ec0d77ab2a6158
SHA1
49ce12224c0329523496d1894838a6534f57b3aa
SHA256
d6f71ff608e72dc21f447793049bee330cfac6fa11407d314a4032943ef9ddbc
SHA512
3691d4f378cb11748a093490124c336cc297748f61275040679adb1a6d4c3cfcd93e1b46581ec3b370665839a1d662f355a8342790bb0bef98a92d03a2f89ccb
SSDEEP
1536:/ePxCUjeSp7qrnhBbgA6U7eLKeAw4RBIYrF4wfsqqPMPFmVYPLdlt:WPxpuLhl6Pf4FrF4l3PYoVOLrt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aed1628cbd83cfbfc9ec0d77ab2a6158_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE