CancelDll
LoadDll
Behavioral task
behavioral1
Sample
76a44c035c6d77523338dcb7540d55cf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
76a44c035c6d77523338dcb7540d55cf_JaffaCakes118
Size
84KB
MD5
76a44c035c6d77523338dcb7540d55cf
SHA1
a3c17a31c8fde0ca71a8d57aaecae6fe98d48a77
SHA256
b0226f135ad32bc2cbab4c2cd79eb62c2f0ec19b381400393a0d5363d3b3a238
SHA512
0abb24ee22ef1a276f82b68d6b9a3f84784d31b9c9f86c629c2af0a4df0cc0cfe60e14cc8d99db25a05cef83f1cd41c5fe7785594ee87672e8ef77af942ee6fe
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvutdCqGOvigPJpWj0hYEdJRaL2EakCtS/7PAh:6SFMDgVswFLdNaz9Sj0SovaOSA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
76a44c035c6d77523338dcb7540d55cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE