CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bd4840e63bd43433250ee28d040e490a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd4840e63bd43433250ee28d040e490a_JaffaCakes118
Size
113KB
MD5
bd4840e63bd43433250ee28d040e490a
SHA1
f0f12f8e01aa4a3d628ca621cdb623ecb1aa0296
SHA256
83a30611a4e04272da85eda47d568363319ee438dad4a4b2b3f211936583319c
SHA512
745c9ac5b5f9e3c9cf208f8689841f51f8684dba8cd43855a9062b489807a2c0e3c10622c250c8ec27e1ece00653eb63955ed48f83ad8db3374645b0eb29b102
SSDEEP
3072:l9L1xm6hpbVcG6fA77yIC5Pf3WadoJ/Cs:hnhpp7iA/yICFf3Pm5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd4840e63bd43433250ee28d040e490a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE