CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b19fd27419d8b180bbc9457a1bb310f8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b19fd27419d8b180bbc9457a1bb310f8_JaffaCakes118
Size
125KB
MD5
b19fd27419d8b180bbc9457a1bb310f8
SHA1
0571538fe95a8b9e65c7a9fb6dfcf6c24405bbb1
SHA256
b1fe5b0322caff91df274667ce619542c815e266e43a4e44eb3c5e034cc644fe
SHA512
20bc1ee05823e11aabd192d4f74f957725aa3027bb804d14da9b37ea49fbd0e09a74141cdbc2ae280d393768cfd12c52bca9d1d974f40fc8a16ebcd7c38ec704
SSDEEP
1536:AHEkUaLBF/H8XEVi/vLxP2nOvarTe+tx6:vEj/cXEVaFP2nbrTe+/6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b19fd27419d8b180bbc9457a1bb310f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE