CancelDll
LoadDll
Behavioral task
behavioral1
Sample
82ec4a5f5adadc21d8ec87adb77e1fd6_JaffaCakes118.dll
Resource
win7-20240705-en
Target
82ec4a5f5adadc21d8ec87adb77e1fd6_JaffaCakes118
Size
115KB
MD5
82ec4a5f5adadc21d8ec87adb77e1fd6
SHA1
dd071edaf3d5b2aefe8a71388f44e49717e805a0
SHA256
497def9e29eb69e06f2ec1f065c0d1b943b1d41a0db618a1c357b99de8e7cba1
SHA512
4ae60136718bef1331a616ee719544a6aacdce07047d4a499c3879cad31dbb7e676f2dc8ffaeba4ba623135abf32cabfdfb65178589cb47e89865c5965ff262c
SSDEEP
3072:QP9hwdmPnW+D+dzVFHm4mKGrYqpcnsbDBXJe:Y9ydmO+D+dzG3KGr/9bdXJe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
82ec4a5f5adadc21d8ec87adb77e1fd6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE