CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bd88fdfa878ef092a2760d436e76acf3_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bd88fdfa878ef092a2760d436e76acf3_JaffaCakes118
Size
153KB
MD5
bd88fdfa878ef092a2760d436e76acf3
SHA1
dbf44cd60322a7ea9e9fc294e0af5b9c7828f8c4
SHA256
5f13a5a85199ca12c7b78a367babacc065d69575ddf96122018a895af764ff84
SHA512
5206beb285216b8bd3d871453bbd6e57348ea254e6eff0445815f2b10943fffe21df650e8428ee8258c11f9016c6d9d1604b5fc46e7bfe8d00afc7402f785949
SSDEEP
1536:6Rw9k6k1FrHc5wX59deBeKoX4HfyEg+q+8a3tjCIHTWYWCK4iHYawdd0:/cHr8Y59EbtfyEg+qAtjXWYWJ34lf0
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bd88fdfa878ef092a2760d436e76acf3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE