CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bc1be5eeb15f0fa05201f10bfa9a4613_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc1be5eeb15f0fa05201f10bfa9a4613_JaffaCakes118
Size
92KB
MD5
bc1be5eeb15f0fa05201f10bfa9a4613
SHA1
7f8dcb25fe320ab072971f85de6c9d2b48b24d95
SHA256
e1790b1e45fd2ab025995291b801ee11a5d1cc1bc4df3e6013e2fbdb75aa7b26
SHA512
14a2294748c4b53b777e0d510d0472278770d30149e92db647921ecd826e59e5a5af02e734f7fc58ee61d57805d0c22da6fe65478b60a496507b7806fecc228d
SSDEEP
1536:sJVbpAYV9DPWYTCKmJsI6aGlurvrhW9BTJGZpCIKVB8ADGLCPBx9J:sJ5SYVcCCKmJ763lMNKBTYZpCbVCWBJF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc1be5eeb15f0fa05201f10bfa9a4613_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE