CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d5aebec6f5d6745e502a142ae618be94_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d5aebec6f5d6745e502a142ae618be94_JaffaCakes118
Size
102KB
MD5
d5aebec6f5d6745e502a142ae618be94
SHA1
90a6a698f7b181979d238965f453b1a6df28ab06
SHA256
4a23d7566dfb01b6c69ff7b30679907098f4f34034a638351f80588ee764fffc
SHA512
6575b9599ca25165c386936cc22d3f275571528a1a6d8f783fd0a1a22977ec090d95ff819641048e57903cf31a5c07ad97d3c3cad4e84e16217af85fea696620
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJq6fNkYl0m89PUJZYM9+0mk8V/:l9L1xm6hpbVc6FjuUPZ+0mk89
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5aebec6f5d6745e502a142ae618be94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE