CancelDll
LoadDll
Behavioral task
behavioral1
Sample
16147d6c9a8dce2df647f5fce24ce688_JaffaCakes118.dll
Resource
win7-20240903-en
Target
16147d6c9a8dce2df647f5fce24ce688_JaffaCakes118
Size
138KB
MD5
16147d6c9a8dce2df647f5fce24ce688
SHA1
ecae4ac19b07a45f72913da3267d6365f23f3baa
SHA256
735a17020661e2bbe723fb1df2c64919fad0512f1adb3ee7afa6530c782749f9
SHA512
70a97e9087ec117f4c10498dc01713be2f7a6d06cddcbce9f4ddce9ff7603050e9465b95222fb42369fa2a51e7e8253bad44fd62282e45ebac28ad0828dcb4c8
SSDEEP
1536:6Rw9k6k1FrHc5OWcVbEwDpMujSPCQduxX59nxWmSnbcCkz2Ltzj:/cHr8glVbXszdud59x7SnoCXL1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
16147d6c9a8dce2df647f5fce24ce688_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE