CancelDll
LoadDll
Behavioral task
behavioral1
Sample
78d11506ab843eeb6373a7ca6fccb39f_JaffaCakes118.dll
Resource
win7-20240729-en
Target
78d11506ab843eeb6373a7ca6fccb39f_JaffaCakes118
Size
99KB
MD5
78d11506ab843eeb6373a7ca6fccb39f
SHA1
31cb2e1c285343dec87e319865c992bf87ec5d44
SHA256
0e3f2f96141634542d4aa36a489cd1d532c22258bd4b7e2f85eb89347bdec317
SHA512
2014c30896b0898b6fd4c8ebaa05d3cbd438f604b747003b3e71b9e208a46dedbdf97576cdc50654129dc83fcf75a846305dbc68ea3b4ef1ebc820ad81669eb5
SSDEEP
1536:qWNTI2j7IGPmy5guIRpRD5sMvxgQSH6hHTjvfcuzZW4TjOD1AM:qWNTHTey5HCrD5sMJZXVESOD1AM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78d11506ab843eeb6373a7ca6fccb39f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE