CancelDll
LoadDll
Behavioral task
behavioral1
Sample
77d97e6b7354125f61b55d34215ac20a_JaffaCakes118.dll
Resource
win7-20240729-en
Target
77d97e6b7354125f61b55d34215ac20a_JaffaCakes118
Size
108KB
MD5
77d97e6b7354125f61b55d34215ac20a
SHA1
ef257bef1fd7ea8d308e4907df15a4474a619a4c
SHA256
92a97b671f2c4b6d6ab092f68d2561e4975ac4eecb57792624bf1385bea07f5e
SHA512
7016ae6bb08cb0f098aa86545f49e67a6243bf24ec6a8b256cd3dc33621214ded7e3d3c695c2e3ff2be6795e0230b65977c22e4e09c912a9e3b5bcbf7a180723
SSDEEP
3072:FfUxhDtZp8vIdCFwnWxMGPbaPY+UBT0A7V:FfghRT0IdCqCM9PY+UiA7V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77d97e6b7354125f61b55d34215ac20a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE