CancelDll
LoadDll
Behavioral task
behavioral1
Sample
830e04431cd6dc6669da907b30f5b3a4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
830e04431cd6dc6669da907b30f5b3a4_JaffaCakes118
Size
109KB
MD5
830e04431cd6dc6669da907b30f5b3a4
SHA1
9a5fae5e98e2ba6fd75ff80fa3eed8c8053b2278
SHA256
48d30d16d0ca461b5520202d4ce1cf4748cde733ec688102e64f56afe773b817
SHA512
be371633c028c17808f2e27a5ab21fc2c0545cff422a98497610451abe76e3ae94f09a80d093318cc400c1aa9dd373b6b56a0f5413ea25a1834007f9fe3b131b
SSDEEP
1536:i64W3b/+sHTUxLu8yeM7b2cmOqwauqaEQd5GYxww3R2XXdKH1cYHmd:1b/+sHuoCqcuZpHGYxb38XXsHOYa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
830e04431cd6dc6669da907b30f5b3a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE