CancelDll
LoadDll
Behavioral task
behavioral1
Sample
965dbacac6559e3c057e5e85eb8ce628_JaffaCakes118.dll
Resource
win7-20240704-en
Target
965dbacac6559e3c057e5e85eb8ce628_JaffaCakes118
Size
102KB
MD5
965dbacac6559e3c057e5e85eb8ce628
SHA1
d7a22cdc779f7be222d8ef17a2b2bbcda6fbd5d2
SHA256
629a1cb3b16107182e3268175cf81b657e2472fa573caebb2c97267352a15bfc
SHA512
4d63b5f60ac49d773fd7f069db61e235a23d341b4eb738c813ecbd4c9dcba93cb568e20e17f2c287592cca53f2f7e5becd23549458d085d1fa6e37b36c9ad8d7
SSDEEP
3072:ZVOReRyH0g/B0p4qJb41bbslP+K1YxOU0:ZUIRYKqqJ41bbsNBck
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
965dbacac6559e3c057e5e85eb8ce628_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE