CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7073a5c7dcd07ec2027ce6acc45cd9b8_JaffaCakes118.dll
Resource
win7-20240705-en
Target
7073a5c7dcd07ec2027ce6acc45cd9b8_JaffaCakes118
Size
89KB
MD5
7073a5c7dcd07ec2027ce6acc45cd9b8
SHA1
d6468f58f5b6dd0ede4e47656ab082e87b5b1b5c
SHA256
6ecbc27d989752df5527f000dce4118297725982acb0a0ceffc16f1d4cc3b07e
SHA512
c2270a35a76c7040d23fc190472c74dc8ba52514f59543e048116f068325fb5a958802134658775ebc9fe50934343f56dfa60e0fcd2d41adbf1bb39e12221316
SSDEEP
1536:DjMKODJPutB+69AmJoX8saL+V6bo/9Ps5cqb6zS4M:+MBpAmdsN9Ps5cLXM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7073a5c7dcd07ec2027ce6acc45cd9b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE