CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b9758320008b1ebbef7388378cdf888b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b9758320008b1ebbef7388378cdf888b_JaffaCakes118
Size
107KB
MD5
b9758320008b1ebbef7388378cdf888b
SHA1
65ff80d4fadfddc17cd730e11dff3d15e63b2b8e
SHA256
e599ec2ed799a53dde08c54670993fa1f7252f9fafa3f1e7b875b58adfa8c19d
SHA512
74c8cc8e37751aa8f288f70689317ce20cd2b1ae78d88c296c15636b21ffc54b9b4a7de2ca7d608351a2b6195b1255b3673bbda750fcf97525649e1ca39a3892
SSDEEP
1536:AnSIWWZU3mEo01Kwdx62qc79qFqIC2p06rpDiRlxMc0C9rDmgSm7:ZF3mE0+62LRiET9rDmK
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b9758320008b1ebbef7388378cdf888b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE