CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b6739d40d7bee375843c35859490e4a4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b6739d40d7bee375843c35859490e4a4_JaffaCakes118
Size
146KB
MD5
b6739d40d7bee375843c35859490e4a4
SHA1
24f6d40258b234304691bd18f6e7d0afc48d2acf
SHA256
295af546e8c33670c041ded21e01038f450fc29fd01024c210346fb29b625032
SHA512
15d5a0ec7843dcd215d5ce5a0323c5b672701afe4c91060da279f8050976ef8a0a8d7f43576effb5777974978d68310ed97714c8b70355897e439ed42114cac2
SSDEEP
1536:pUEkUaLBLNH8D0Y/Vv+kHYuuG/lCq4TZ2nWIqMVYFVS73i6G7:DExNcwY0ZuCqoszqVsQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6739d40d7bee375843c35859490e4a4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE