CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8a503c60a75ae57a164aa0753512cf6c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8a503c60a75ae57a164aa0753512cf6c_JaffaCakes118
Size
113KB
MD5
8a503c60a75ae57a164aa0753512cf6c
SHA1
fcc39199f9b1d58ccdc5261fc24b3b7850456686
SHA256
36d1a8c0b77702faf189c54c44abccf2c1620aba47b8d0cd4107af67ab9b726b
SHA512
8af3147ded38645c5e8256584c7ab69e664f0a0226f7d0eab98d22929b07bb4cc315daac937b5a77e80e7eb406adf01b2b78025ba99265317bb8280f4cbbb303
SSDEEP
1536:heJckZaGRzCuu/6XnhBbgA6UFFC0Nyha/jCWV7fGiy9rg127bGXPNVAtjWC4+bK5:gJvs2A6Xh/F9jx1ucLVA05
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a503c60a75ae57a164aa0753512cf6c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE