CancelDll
LoadDll
Behavioral task
behavioral1
Sample
abc0238643d7ea1b9aa00440963eb51a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
abc0238643d7ea1b9aa00440963eb51a_JaffaCakes118
Size
99KB
MD5
abc0238643d7ea1b9aa00440963eb51a
SHA1
d71926ef6e614e5b2e959a28ba052a4b4dbafa0b
SHA256
8015eb82d046e29658ce90417cb53ac694c85b24157f53a4a005108745789d0a
SHA512
ff4e21e63916f0697d3242e924c4443980a1d36fcf2ab6fd28707cffdb04461c1a74a954c42893f9ad392de95bf3a9dce553db291a974f3797cb9ea3765bd655
SSDEEP
1536:Gtbad8oQmjBhVNiHseJHR3H9EcKAPU8lthif71A9QJz62e1u:maSMBhVNgJx3dEcfPdgHJzSu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
abc0238643d7ea1b9aa00440963eb51a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE