CancelDll
LoadDll
Behavioral task
behavioral1
Sample
afbbfb46a08dc7c8423dd5a60360b227_JaffaCakes118.dll
Resource
win7-20240705-en
Target
afbbfb46a08dc7c8423dd5a60360b227_JaffaCakes118
Size
6.4MB
MD5
afbbfb46a08dc7c8423dd5a60360b227
SHA1
08c52b19af8cdbf90e29d2659451ef9ee9e7e7f0
SHA256
cff8f7430a11d8175d7041c6d6d1f78eed193c28ae191fda93c7d936bd4f35ce
SHA512
e415cc88a5988cc3ba1187f56e8e41adf2f57eb3fce6c2a6951d85e5ba82eeefd709c535aba5c832184e4b400fe761c4584828e1f251fd56f1313c47b31362c4
SSDEEP
1536:QRWkYQJO09I1qyJUxTxEN29xkTSg+3/3wtOjaw:yWkYQMILyJUC24D+Irw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
afbbfb46a08dc7c8423dd5a60360b227_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE