CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bbe416276c684335678ae36876e84c1a_JaffaCakes118.dll
Resource
win7-20240729-en
Target
bbe416276c684335678ae36876e84c1a_JaffaCakes118
Size
99KB
MD5
bbe416276c684335678ae36876e84c1a
SHA1
d3f6808d9290b7679f57b6439d3bbe9f7dc505c1
SHA256
cbd22b8aae1f874425c649d1ccc0c9ec13a32d80244d4b4d7d084b2b6827ab69
SHA512
57e1341f8736e4c5db5f82eebb65b29e94c03db6d0816cd70e80e34f9905513a9c4497b531fbc732b8edbbc5675fce00c5f8295617a71600da6522d1cef94cc1
SSDEEP
3072:ARlNzx55pq8FLeyX6YQlS/chMttc0ibwgK:ARllx4KrKYkwchMttPGwt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bbe416276c684335678ae36876e84c1a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE