CancelDll
LoadDll
Behavioral task
behavioral1
Sample
88d43e054c9dd81d4068c3f14a4332c0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
88d43e054c9dd81d4068c3f14a4332c0_JaffaCakes118
Size
95KB
MD5
88d43e054c9dd81d4068c3f14a4332c0
SHA1
e626abc903797a89eabc76060ef615d6b2adbc74
SHA256
d4d1f3e67283078f1e23916d8dec91c9c5f25d826e781b03fa554ce179b28df5
SHA512
2feebe5ef114cb63f865f887e6bf4d40650d62297adbb2a58d290a76f51620e27a19bb4a6ee162cbb42a7424853dee5e62d17af134362f395a18156e5f92f167
SSDEEP
1536:QPHd2owFn+G5mAGHnWau2Hx9e+P5Vk84SfPfTEYrRu/r:QP9hwdmPnWYx9eQF4SfTEQRo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88d43e054c9dd81d4068c3f14a4332c0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE