CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2d385d641f819f8d12be02722cb13e61_JaffaCakes118.dll
Resource
win7-20240903-en
Target
2d385d641f819f8d12be02722cb13e61_JaffaCakes118
Size
97KB
MD5
2d385d641f819f8d12be02722cb13e61
SHA1
0d325d8dbd8863b0b84f2313fea784520faab35e
SHA256
614049994c82f8626cdead8d03b73e47237a68c28b3e486665d8e4d2141808c6
SHA512
06fdaf780460de94be842bbaef06c04cc8a96d6c37568b6dc170751e6db3eee06925062bd371220ad70f0f75dade91ab8371099adce7fa30d47f0f563e48a7b4
SSDEEP
1536:JVGqeHHrjdj9qc7aocoIALf+qQKqqXUjY1FH/96VB+QM7JLT:JKLjdjAchLf+HRqXsYrf9jXJv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2d385d641f819f8d12be02722cb13e61_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE