CancelDll
LoadDll
Behavioral task
behavioral1
Sample
87853c2c5847a5e446ea79ccc8e5f8b8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
87853c2c5847a5e446ea79ccc8e5f8b8_JaffaCakes118
Size
97KB
MD5
87853c2c5847a5e446ea79ccc8e5f8b8
SHA1
6a7e0cf794b04bc7f2a7c96cbfa3c2552a2ceb36
SHA256
da4aceba5728a37cd25d39972892c3b19f981abdba36f4adb4e57a0c9df1ea7b
SHA512
966601a03a8d6f68c57b062bfb84ce69bc63ce732c1dfc73bc0ae0a9300c8dfa6c062337378f1685eaa27174cd727cdfd58cf0ff06728b08165a067cbfee0a5c
SSDEEP
1536:EhK07MvjJjHcKsoDdMpP49vSG1eHZpS8UZ/yEjo85tG6:2KmMvjJ7/dMpwd42FY8rG6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
87853c2c5847a5e446ea79ccc8e5f8b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE