CancelDll
LoadDll
Behavioral task
behavioral1
Sample
14aa9537ed8469aae34285489d9fd1f9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
14aa9537ed8469aae34285489d9fd1f9_JaffaCakes118
Size
83KB
MD5
14aa9537ed8469aae34285489d9fd1f9
SHA1
6c21c79c63b106256ef735454be2247eaa60227f
SHA256
93e03d45d7127f23e41eace47f9629f2d76f1cdb411d668d9d72f61d4e3ce548
SHA512
0f28505c96a6f52b45d1286abac1d25f2dd8cef5fe4f173b10ae154aa6c919c68b9959cd395d07724005e0fcb5dd16eef35746ae68c9d84f4e26f796014dc7f4
SSDEEP
1536:SAVJ0mWeB/iU9itp//Spil0wL8FBHEaZ3J3q:zJ0mW8/ij1AilXkkaZ3Ja
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
14aa9537ed8469aae34285489d9fd1f9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE