CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7564f17c445fcd881a62fa2d14c1e87b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
7564f17c445fcd881a62fa2d14c1e87b_JaffaCakes118
Size
102KB
MD5
7564f17c445fcd881a62fa2d14c1e87b
SHA1
00c5a1cabbc70bee4f9b6e1f8708c4feb2651d09
SHA256
5b566898b92cb724ef9f7cd196ebdbd9221080dff7ad7cfccb71446938976da1
SHA512
5c8e949ce89393aa9e2bad5349e8218a7cde3077ca09cb3fd034de2df4188e763d1a8d022ec9b4bdbda7cf8e726840371d787d5842162b2a6e7cc24eb0495938
SSDEEP
1536:LIuBbJUd3hLZDuruMXU8MAWQnijHP4MwrsBKHyKh+Hx4wWd8BeoiQ9+CpHO:chdxwquU8MAWQijnwrQ7Hx4wWceobbu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7564f17c445fcd881a62fa2d14c1e87b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE