CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2a8d18850d82ada54704a84a9ce746be_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2a8d18850d82ada54704a84a9ce746be_JaffaCakes118
Size
89KB
MD5
2a8d18850d82ada54704a84a9ce746be
SHA1
423a922c78cb37e0a99ff9b2ca1efa81ad90c362
SHA256
d6b7ccb1d30236a66afd8fb84f4304f048564fed8b12ea975dc86132355d6930
SHA512
1f6d66c710ad86c96e9acf8e07b94f52843e2e05e137f0f3e33a52712a9abcd9ae199d93a4fdc655ab2aed4d2cb60fd58951074bcb4e33b7485fec74d7d59a3b
SSDEEP
1536:SAVJ0mWeB/iU9ddSrT5bZ8gQX4T/4Dy8BTrzrhJCX:zJ0mW8/i7rhygZT/4Dy8BvzrhJCX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2a8d18850d82ada54704a84a9ce746be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE