CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b798b1d859bd3988238fbfd8ec4a1a1c_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b798b1d859bd3988238fbfd8ec4a1a1c_JaffaCakes118
Size
108KB
MD5
b798b1d859bd3988238fbfd8ec4a1a1c
SHA1
ae0b056f0a981c3ac7fea35fa9968a66e2f43585
SHA256
c94f5d871c13cb6435479e878daa6c59f52d126d8f55447583bc7517ba5dd4ea
SHA512
6d62d4a72482af72c973143757c952d3c5c757251c37c0dc7d31ab2fa4cd332f257ae42791b0c2123225bf130ca2735dd52de6ebbb59b4ff5d8ea62f8c0aff76
SSDEEP
1536:XpoZectu35iLnGlfahGyLNuid1YMcU1jLyPEJEyhUytjZbVs+5fNJcs:XpoZP8ijIfasyLNp1hc0jnJhXbVrTcs
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b798b1d859bd3988238fbfd8ec4a1a1c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE