CancelDll
LoadDll
Behavioral task
behavioral1
Sample
758c0d0a88459ce606c91429798a15c9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
758c0d0a88459ce606c91429798a15c9_JaffaCakes118
Size
127KB
MD5
758c0d0a88459ce606c91429798a15c9
SHA1
8e95b402ef154394fabc32804e0b94f800550f9d
SHA256
b87e51c13822acc9e23231794473031d97ff0055d65c0153b5a77ee58df57c23
SHA512
e1abfddbc87a5a7ad8d17488150dcb14101ae28d4366ae5fa3b190651cdd8100a2de5c00e0ab5cfd1567740e3426e85d871bbd0461302fe16921e956c46f336e
SSDEEP
3072:l9L1xm6hpbVcWjimDVj1BWY8FovvZE+sKH:hnhppJjlRj1BWYuovvZoq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
758c0d0a88459ce606c91429798a15c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE