CancelDll
LoadDll
Behavioral task
behavioral1
Sample
77ef0d9cb0f997bc48af5c5be4e787ce_JaffaCakes118.dll
Resource
win7-20240708-en
Target
77ef0d9cb0f997bc48af5c5be4e787ce_JaffaCakes118
Size
100KB
MD5
77ef0d9cb0f997bc48af5c5be4e787ce
SHA1
2014fa6d35ce2d0b997254af4fa3188622b4aafb
SHA256
ffbaeb1c729c5c541aee48dd1e78739c73fc65459bd689600c9848fde72b4fc1
SHA512
36e1ae9d50efee334f677d391d8bd4714c3472956db1ca295700e63bfed3dfdb27c4cdcf35baf59ba98df65a38628082c9b8033c20d7c801eb77c02871277a3f
SSDEEP
1536:OoKR1YFY/H4SXxyBvaoNTnl20MBb74jz9kzVDnB+sZACLTxUXKgGTk1DtPoR:+1YZSByxaoNTnl2deuzRBdCk/gEgtwR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
77ef0d9cb0f997bc48af5c5be4e787ce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE