CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bbbbdbfeb75db172b35ee7a5d3378b8a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
bbbbdbfeb75db172b35ee7a5d3378b8a_JaffaCakes118
Size
103KB
MD5
bbbbdbfeb75db172b35ee7a5d3378b8a
SHA1
3cdb53cdbd1ccd9314e32e39a7d749cc02fe92c7
SHA256
7014854e8cd3ff3aa7ae275574f9e0b4496dd8c10cdbb3b57b893ed570e203ce
SHA512
680c890067a2baade272303f37acd9c4108189f50901a142f864b6d51994cc843895ddf790eae808f40fcce6827ba81a1e751170ce917da9020769d121cbd828
SSDEEP
3072:Ud5W8kw/jdt9YDJyCOUS9wQQ7PF6QWOFSzhMJoj:Ud59bdt9sx3SKQQ7PF59MzhMSj
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bbbbdbfeb75db172b35ee7a5d3378b8a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE