CancelDll
LoadDll
Behavioral task
behavioral1
Sample
13a966d9c38a88a7692a456564f7c544_JaffaCakes118.dll
Resource
win7-20240729-en
Target
13a966d9c38a88a7692a456564f7c544_JaffaCakes118
Size
99KB
MD5
13a966d9c38a88a7692a456564f7c544
SHA1
fd9795d7350fc4589ce864bffa9bea0d5af89784
SHA256
9cb2d7d731392ec403c60f173598590c646381f7089fe894efa9e783312ee08e
SHA512
018ce97e4db64029a8727dc01f9b4a1c87963823fa45f6e34d34db238e5d08d8441488760456b7869dc49351aa702f7ba580f665f39cb3fcb509a19ded62734f
SSDEEP
1536:SAVJ0mWeB/iU9R3prAjPb21g3k7jlCZicVNSHm1yzpqvVx:zJ0mW8/iO1Ef30ksG1h
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
13a966d9c38a88a7692a456564f7c544_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE