CancelDll
LoadDll
Behavioral task
behavioral1
Sample
956fb2d67e6b5a43ff6d8c897e962b4d_JaffaCakes118.dll
Resource
win7-20240704-en
Target
956fb2d67e6b5a43ff6d8c897e962b4d_JaffaCakes118
Size
128KB
MD5
956fb2d67e6b5a43ff6d8c897e962b4d
SHA1
750bcdd1a2a6ad6da405e0e474d85af02d8b3a3c
SHA256
8d431b9ca07219e9be841da96cea0bd28c8fc3b6e03a9af5e5494c7819b42e06
SHA512
fb7c944cf797ac80ee4b3d1c68beee80282871c41f76f999726aeab3b991b2052164594b8dae1e8bb2f86f031029cb48b88416b21136fadb5491187b04c800fe
SSDEEP
768:9hc2rbssHT2tFrU1+HLkcl9vzrXFPGmKEGepSachaG9lpHQk088Cj7bm+0E3qpoi:9NEFUaLBF/H8lbF088O34nuIq/nw7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
956fb2d67e6b5a43ff6d8c897e962b4d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE