CancelDll
LoadDll
Behavioral task
behavioral1
Sample
688c54a9aad637bb8c7fba40fd4647dc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
688c54a9aad637bb8c7fba40fd4647dc_JaffaCakes118
Size
82KB
MD5
688c54a9aad637bb8c7fba40fd4647dc
SHA1
ea31235005f6f621c536901bbfa15a6c0bd5c517
SHA256
a09d51f3bde41ac4ba5f6f980f0676490b9a226c06a7ac5dbde21d5978e522f4
SHA512
eb507b9c8e34920ba5127e17c25641faffc06cc67fdc2b3db81c09b95372013b559534aac00531d2f8a28f1bb00a3728e4bc15c151b43f459743ae4d4a61a8b1
SSDEEP
768:Rz/uP24Ir1cpp7WtmKEGrK6IrRykew+x1QuuAFPVFK8EUXJPyp3GFj61Ea1L1jpH:RzL079679wc9Y8EQypkda1LJGmfRMK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
688c54a9aad637bb8c7fba40fd4647dc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE