CancelDll
LoadDll
Behavioral task
behavioral1
Sample
698583f4d18a9ec87aa750d8ab94f90d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
698583f4d18a9ec87aa750d8ab94f90d_JaffaCakes118
Size
83KB
MD5
698583f4d18a9ec87aa750d8ab94f90d
SHA1
6f217d62257b97daa4e2e24108d334fab7975305
SHA256
539fbad4b4597f650ec782236fc8351e4edeb9b9d8cf1c2a8ab6191cdb6f5e60
SHA512
704e7acdc8b21d7198250a39e54248f69b85d1572d524e3eeeee7cd884fb9be4eb10d096067d138ae347d97a47c8f1046b461d8570d6584864e224d77691b91b
SSDEEP
1536:53/5hksBgk16zIUiHHan0oGZ5S5xtuFcUXIY9b+CX2Z6k:53/5Su16zonlFZ58xgFRHbZrk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
698583f4d18a9ec87aa750d8ab94f90d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE