CancelDll
LoadDll
Behavioral task
behavioral1
Sample
11308b972420e00a0612d5f8d19fa568_JaffaCakes118.dll
Resource
win7-20240903-en
Target
11308b972420e00a0612d5f8d19fa568_JaffaCakes118
Size
80KB
MD5
11308b972420e00a0612d5f8d19fa568
SHA1
51b148b7c72c84c03cc8506689e17c77fd3d8cc2
SHA256
e3080fbd4eb30161d3b7b97d02078297d3106bf13e357a0bb1b79d60dd1851c7
SHA512
7a043e4bfe8593cb6ee191fced7504fc6743258bc8dda5a39e6ce4b3bdce02c6356b4f3e34b03ae75d1bc9c76f675ce0158ceb7e9cbeccb515aa869b89154e54
SSDEEP
1536:SQclh8MIwu5+oYsJKX95ywO3N8xIqS5LpkEv:ahdIw/oY3cldIIqolnv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
11308b972420e00a0612d5f8d19fa568_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE