CancelDll
LoadDll
Behavioral task
behavioral1
Sample
aeae8564ff5245a6e05ea5a1467b8f69_JaffaCakes118.dll
Resource
win7-20240729-en
Target
aeae8564ff5245a6e05ea5a1467b8f69_JaffaCakes118
Size
93KB
MD5
aeae8564ff5245a6e05ea5a1467b8f69
SHA1
dfb3c8b388b1100353200ad5a5ab2a9ae17ab871
SHA256
3a83eca95fad8672c48332982be791b8b57e5260cf8f62c6ef4f5033efacd54c
SHA512
6156d50566a9294886718290478c98cf7fd723ade15e658fc8574102db71b920ad988edb8ef543b1a6e45d6df8455cd76b24f94fa66acd4be6466c79861926a7
SSDEEP
1536:LmSQNbJE1vj8gDxkOwvl/QXE2UtDbI8j/fvWGPw37fT2pmRSoUPV:LmFty1L8gDyOw1Q8JvW537fKm7UPV
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
aeae8564ff5245a6e05ea5a1467b8f69_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE