CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0a56a6a642820715102b02b120b00994_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0a56a6a642820715102b02b120b00994_JaffaCakes118
Size
137KB
MD5
0a56a6a642820715102b02b120b00994
SHA1
37b401d5a2892c30ff3936eceef49256a9ff7a7c
SHA256
4ca69852dbdbb292b82dfd5b404ad3cefab1a3fffffbed20fd01ba2383487bc8
SHA512
79894a77a5000044d9b050818087abe76fcacb6bb27b13d9a85cfe49434f50ae0a5592a89c8b3352c660980f083c4562d0064f31883235edbfd838b9a3db2ef8
SSDEEP
1536:6Rw9k6k1FrHc5sx49gnfW8aY27w7wFO21FGJOpJNv4zcG1QYT5:/cHr8ux4sfWY/7wFM6rvldY1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a56a6a642820715102b02b120b00994_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE