CancelDll
LoadDll
Behavioral task
behavioral1
Sample
75d5e44f7c0b456048d2d9e59418f53d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
75d5e44f7c0b456048d2d9e59418f53d_JaffaCakes118
Size
102KB
MD5
75d5e44f7c0b456048d2d9e59418f53d
SHA1
389ac311e0d68ac3dd8f736d1d36158873e379a4
SHA256
71845b49d62c595a9de4fbf818687f9bc96b58a124bfdcd892e7283177de0247
SHA512
c782545a0e8fded0d4c1ea852862005e85a9c8a0b64da566defbf6dba86db9ecf9fda0a9f8a81c757031e8f444e0d466f6246be5553a1a134e77aa4e5e8ddb5b
SSDEEP
3072:ARlNzx55pq8FLeoFIt4UopFgx2OdEUHw/t:ARllx4KfFda2QHw/t
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
75d5e44f7c0b456048d2d9e59418f53d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE