CancelDll
LoadDll
Behavioral task
behavioral1
Sample
789854dfaa8bf6642dd5204d50fef3a8_JaffaCakes118.dll
Resource
win7-20240704-en
Target
789854dfaa8bf6642dd5204d50fef3a8_JaffaCakes118
Size
99KB
MD5
789854dfaa8bf6642dd5204d50fef3a8
SHA1
ebfb431c4aa868420f5e024315aa410429a2dda5
SHA256
f32f7339492d19c865b198bda5c69b8f1754ec4c3fb145938bffbb34f6c3b604
SHA512
8b3a1b87a927c8d9fbfcb8be89d317594685e685038fba59cbd800c8f4d5fbab5a15119776e845ec6c0261464851744e6bdec6d56ac0d8b95d9ce3265876a0b1
SSDEEP
1536:qWNTI2j7IGPmy5guIRpbyEDLrWymMFouOO1Nm0EhqiWDGT9xEHET2:qWNTHTey5HCQEDvrFoWG0EhqGT9xEHv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
789854dfaa8bf6642dd5204d50fef3a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE