CancelDll
LoadDll
Behavioral task
behavioral1
Sample
776ed1348ad6ee6c49e17b73e8efbc09_JaffaCakes118.dll
Resource
win7-20240705-en
Target
776ed1348ad6ee6c49e17b73e8efbc09_JaffaCakes118
Size
2.1MB
MD5
776ed1348ad6ee6c49e17b73e8efbc09
SHA1
757b9477a47d1c337618a44df6de67e54bee4577
SHA256
dcfa4b61fa857f2058b302e851dcd8f3f44213e6f17548d812214daaff95f5bf
SHA512
107beaed9e6c17648e1ab3bb4434c179509fc4f83c92a9bd8da8a3a8b31a41c0152fcd6cf0475ecd153d7d419922dc31c435e7ca27ce1c43d80eb3c1dee7482a
SSDEEP
3072:Dhwz0p26nVPdinqrOz9H4vOdKREmluesNF3:DyQp2QdIcO5HaOql1sNF3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
776ed1348ad6ee6c49e17b73e8efbc09_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE