CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bc41a6dc088066816c6d28a058de8e04_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bc41a6dc088066816c6d28a058de8e04_JaffaCakes118
Size
86KB
MD5
bc41a6dc088066816c6d28a058de8e04
SHA1
8d7a48b16ba7a806bee2b19130372a9d6c3da5d1
SHA256
107814df95e83337e0e62b08d2ac40fe692cf8a4b0d59bdd34bc86987ee26ddb
SHA512
23020e8940dc4632380c4c7b9e62c691ba83b6efe3fd16acc1d93e16020916c133d8ce375de8891fd8193e1411f7f2ba9d29e3b863782e97f1d5767795d947cd
SSDEEP
1536:SAVJ0mWeB/iU97HG7igEhQYyLgIvL8ueOhUdA+OV2:zJ0mW8/ir7iXhXk+OV2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc41a6dc088066816c6d28a058de8e04_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE