CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7788f599d9bfe874e8878be4eedae37c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7788f599d9bfe874e8878be4eedae37c_JaffaCakes118
Size
6.4MB
MD5
7788f599d9bfe874e8878be4eedae37c
SHA1
5e6924fd50284c5f0ca1424a83d17b3b1d5f4a0b
SHA256
7f8d176affbfa6cc7b60ec867d54a0586375477b926a614f36c29d5eec756755
SHA512
9df2888fc8f39a4e682f155e5fa2b79a4781822115e168da6b2cf9b3e8516d2cb9c834afc9743cd6b42b9904f54f88f9dfa99f15dcee508f8130d07d3f26a84a
SSDEEP
1536:OQvJIzBVpeR6fG3Ib8TM/3reuQuIvYdv/q501BwS11/z9:OQOiR6fGSmM/Cy/q5012S11/x
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7788f599d9bfe874e8878be4eedae37c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE