CancelDll
LoadDll
Behavioral task
behavioral1
Sample
767f14412d552097450e7f24a5ec8dc1_JaffaCakes118.dll
Resource
win7-20240704-en
Target
767f14412d552097450e7f24a5ec8dc1_JaffaCakes118
Size
90KB
MD5
767f14412d552097450e7f24a5ec8dc1
SHA1
9eacd610997dcee254ac6722672d0981c69cf141
SHA256
f6347fd9ac658df6a6a717fa7a53d5b6c8c977c1ae8c1d85fcca5650a7162203
SHA512
877993cb67cba8d0f844a49ce37733166d0e39a6894dcf17c0017e7e5562d25258eea91c332eaf64317acd1428dcf6e70d1520c79057969ee2367ebda705b7ce
SSDEEP
1536:Jj3lafACV9qgjasHzYYAjDgX/yATz4THpTij8vLCsMgzPVLTtPR9:7RCVcAHzYRjDDQzBj8jVztLTtPz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
767f14412d552097450e7f24a5ec8dc1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE