CancelDll
LoadDll
Behavioral task
behavioral1
Sample
78795ba1dac653d7c43ec095e1885a7e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
78795ba1dac653d7c43ec095e1885a7e_JaffaCakes118
Size
94KB
MD5
78795ba1dac653d7c43ec095e1885a7e
SHA1
49814fe32e787c17bf25e5552cfe01854dab2e17
SHA256
435b3f934d2ccd0295521670c9a186cb4349e2fd4982f3178b683772cb0864c8
SHA512
2f83613dd1147a73269d36a395d293211eedbf5ccc1f61f86b216960c60f6bc0528fcaacabe8e56099d0d083142ce6d2ae5bb103e32a1d31db48f70bd52d9fd2
SSDEEP
1536:/xLK2OReR3CHpzODRVL9AFlYyooED94Ki6i:ZVOReRyHpzOFV9AE1CKi6i
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78795ba1dac653d7c43ec095e1885a7e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE