CancelDll
LoadDll
Behavioral task
behavioral1
Sample
882e13b6bc84f5904276db1f042f9f63_JaffaCakes118.dll
Resource
win7-20240705-en
Target
882e13b6bc84f5904276db1f042f9f63_JaffaCakes118
Size
143KB
MD5
882e13b6bc84f5904276db1f042f9f63
SHA1
cf638472fa96f78660272a28c15e0fa74606e68f
SHA256
51008587c035740cf7abc05fe9138d3b13b73164e9c30cb03c15a77145d863b3
SHA512
8b19b0d855121acf2d21c38972ffe27a507209558b2dd09759f0793ba603403c7ed1b4720fe472b0e0eeac64dc510cfc3d95404664cc9073366794ec6b2130ca
SSDEEP
1536:6Rw9k6k1FrHc5dCL6RkwFqftcV+Uumieq3OnCH5xXmcw:/cHr8LCLKnQSV+UniF3OnCZxX7w
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
882e13b6bc84f5904276db1f042f9f63_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE