CancelDll
LoadDll
Behavioral task
behavioral1
Sample
78ff0388728a7bc4f7d3bc852242a08a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
78ff0388728a7bc4f7d3bc852242a08a_JaffaCakes118
Size
88KB
MD5
78ff0388728a7bc4f7d3bc852242a08a
SHA1
032f89a89cc077d0a404310df14e1bc22752f908
SHA256
5302c4ead3a5cdf476b19bb9bc254c9a30426fcc3ffe04019ef608d9e51b99c4
SHA512
092d9cbf96b3e1156ad36f0d9ed5e10b0cf8e444d287cbb54ed5cc72106798eb62b35597f69895a543c9b53868ee5b2e9d1fb6e5992d25e86253d2e0c3a62e6e
SSDEEP
1536:J3iyDPFw2bprmj2k8Gf6NONw0RejWd2AxwR+EvMcmiLRas0U:1Tw2bpCyk89IFReyd2AxwR3vQidBz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
78ff0388728a7bc4f7d3bc852242a08a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE