CancelDll
LoadDll
Behavioral task
behavioral1
Sample
76e4b56332560f48b59aa5a97b7cfdc8_JaffaCakes118.dll
Resource
win7-20240705-en
Target
76e4b56332560f48b59aa5a97b7cfdc8_JaffaCakes118
Size
101KB
MD5
76e4b56332560f48b59aa5a97b7cfdc8
SHA1
d7ed398b0c72d6c2a7d86c0ebab3443a276a39a8
SHA256
faa7cd25f661bb274763831ea59508cba34eb6d292e6356da78fb5b6b67a9e57
SHA512
ae66ed47245d04a11e3ba837d3a672c235b027269a78c794169229b7369ba42f118f9a7f333d97e75e6ee29774f6774af22b153effa4051784e07b1d83b1c3bd
SSDEEP
1536:A3/bBBnYanemz8rFz4rKvDj0avATibA687XUxlycHZr2iF//UnoXU:A3/bb3emz8rB50fQ87XhSxl/UnoXU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
76e4b56332560f48b59aa5a97b7cfdc8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE