CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bac13a0d7251d66240ddfb4680835f69_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bac13a0d7251d66240ddfb4680835f69_JaffaCakes118
Size
2.1MB
MD5
bac13a0d7251d66240ddfb4680835f69
SHA1
f5d6a4f65421df22c7e5bddd271fc62d7910e90a
SHA256
97ac8320ade80627c4a8fd3d67ba3a719c07eb39871cb7816692191a4f377e12
SHA512
dd5b805660efeedd8b2c55de543629e8783596cc8b63c0d53fac91193eb9c78595feff28cfc0bf2bac137060a2dd0536c5a7e59ddde0f6da7d7721e5a0ed8c92
SSDEEP
1536:O2owFwWElaDWMQu0PB5+KP/Odh54Uwxvvmpzme4DDBtRAHLje40:OhwmtlWWq0P/r/pUwdWmew8HT0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bac13a0d7251d66240ddfb4680835f69_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE