CancelDll
LoadDll
Behavioral task
behavioral1
Sample
af6e4035a577e5f1e1539122528f616c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
af6e4035a577e5f1e1539122528f616c_JaffaCakes118
Size
96KB
MD5
af6e4035a577e5f1e1539122528f616c
SHA1
da187c720b5adfa0f2ba01b51b0e1839c3404e42
SHA256
3d36ffdaf3b4104b38281641840809fdebf513bc1c361e8d6da0da39b97f73ca
SHA512
63dce43e36c512fb658b7c779d0dc81276474b08df8c5272802107b5d33c54c8eca2eadda4956dfa818efdd9ff2d1f2b7389fae2166edbeb15502f45df1814b7
SSDEEP
3072:zJ0mW8/iYSS8GhIiy8TkirFev08sW7O5ez:RW8LSCh7ZrIju5ez
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
af6e4035a577e5f1e1539122528f616c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE