CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7737eacf14e5a92022cdfbe39762e872_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7737eacf14e5a92022cdfbe39762e872_JaffaCakes118
Size
130KB
MD5
7737eacf14e5a92022cdfbe39762e872
SHA1
ddce21efec8615829f554b111c6251104d458651
SHA256
cbc1f9d73712e3f7476430b213aa628f988fca8faa0265dbaf97c6cb291b698e
SHA512
18d7d3adc4b9ee776b1332828e0762f75de2d1b94bdeafa20e90df5c031d26c536bf329322bc082f0b6b340f212b213a53edc9999cca7f85e41feb3fb952b1e1
SSDEEP
3072:13sL6Dh75v8RMP8NnY0C0/FUvI7w2vTMO:1cAh75U+620NUvIzvAO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7737eacf14e5a92022cdfbe39762e872_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE