CancelDll
LoadDll
Behavioral task
behavioral1
Sample
7825b6d0e6505e3033c25d52624ae84a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
7825b6d0e6505e3033c25d52624ae84a_JaffaCakes118
Size
95KB
MD5
7825b6d0e6505e3033c25d52624ae84a
SHA1
48818bca7a1acc8e9f1c2e1bcca95714edadfe73
SHA256
7aed68ab723a954414962f540aa8d97c1a1bb4156923025b6176dd8f73442a43
SHA512
b4d7f9f19aa393e2ae62a397f69cabbaacac4684f1998449626347279b1edf78900af8359ffb34b180e10f96465e8c6e2b6ef5cb1fb6ed6a6c483d535b8f11f6
SSDEEP
1536:TD6K271gp7DXHQ49A7Z6M8wv/tBND6HXeudtsiRpcS:TDGYLww2f3v1TD6LtsSX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
7825b6d0e6505e3033c25d52624ae84a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE