CancelDll
LoadDll
Behavioral task
behavioral1
Sample
951b4f195ad6c88f44a90b915affbefe_JaffaCakes118.dll
Resource
win7-20240704-en
Target
951b4f195ad6c88f44a90b915affbefe_JaffaCakes118
Size
6.4MB
MD5
951b4f195ad6c88f44a90b915affbefe
SHA1
00ec7c35fc5c9baa11e5b1f0b77da0827a881be8
SHA256
c4888bab978b60a7ff7b5247ac1f8565a8225cce8e918f01091d60bce186203f
SHA512
d2f65eb6b25147107c310249e1393cefc615f85d9dc754c724b824c2d03c6d99ad8152ca074d4b0b897153780026e09d22363fb6a0e27a1a6829cc9e8da8ec2f
SSDEEP
3072:dgPW5g9YXSCR5FM2qBraBRD0v5Td4P8EKU3:GPUXfXM2qB+fwv5CUEX3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
951b4f195ad6c88f44a90b915affbefe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE