CancelDll
LoadDll
Behavioral task
behavioral1
Sample
83d4b54f10bb656c12b4ebc890dbaf93_JaffaCakes118.dll
Resource
win7-20240705-en
Target
83d4b54f10bb656c12b4ebc890dbaf93_JaffaCakes118
Size
94KB
MD5
83d4b54f10bb656c12b4ebc890dbaf93
SHA1
60a1d6f23c352f34b54e8aac36713d6d99831099
SHA256
3ed8922c8d29abbb896c99d9e73ecba36e6392fc3e642bfb7017838f99a1014d
SHA512
50db9b657674692720140fd0cca8860ab33e27bd7109bc93aa9e606809df9b1173059268826decf2293377ce51ed2f69adc33ee709b73eb70cb7891bebed0ad8
SSDEEP
1536:INWujxA5EY8fwKV/2hu4gv3bKRdSgxdt0JS6RV498d61XoaXP:x/2Y84C/qDgv35gxL0JS6Py8d6eqP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83d4b54f10bb656c12b4ebc890dbaf93_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE