CancelDll
LoadDll
Behavioral task
behavioral1
Sample
88eb3c176a460dd2defa836037b3f4a7_JaffaCakes118.dll
Resource
win7-20240704-en
Target
88eb3c176a460dd2defa836037b3f4a7_JaffaCakes118
Size
107KB
MD5
88eb3c176a460dd2defa836037b3f4a7
SHA1
399ea2b5e96a95835beea4a5332626c523f2a1cb
SHA256
a15f31c22885a846d9476a44229d24be5deaeffe4cee2c91e72dc72a8845f8e5
SHA512
de0ca591cb2f05c6c85e98c0c184a2c8780eac392231fe0fb4e788653d5f78af3d568b15acde8ec5c8ebbd76803391cf7334570c41cac08f627b98d2a0325578
SSDEEP
1536:INWujxA5EY8fwKV+3+817Tcu1KMdliWVXqqbiuyG92mhoxvZHLAUqFH:x/2Y84C+O0bgWsQdLrMr0V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88eb3c176a460dd2defa836037b3f4a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE