CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bc7346165070f7d0cf6fe280be6708b5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bc7346165070f7d0cf6fe280be6708b5_JaffaCakes118
Size
102KB
MD5
bc7346165070f7d0cf6fe280be6708b5
SHA1
8d6a6b0dd04ffac0752d48e03f362757bf6e2b92
SHA256
44332832807369e8c5e6ef54233e5d4db777f96f9d8bf76ea89935e8afbb8198
SHA512
6b1c0b454f230cef3cf9c521c888163eb9a4ab9b5699cc9b74d8f0f37c263a43b5208fac5269c5c00357806275d279f1729020c936adcb1c5faeb89f5688f4fd
SSDEEP
1536:jpSyrn1CZZV1ErUuXippO+ehQ101NJy5OQwXYADRrpps6VlcSD38r7iJ:gyLSzErUuy6QeZYQjplVlcSDy7k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bc7346165070f7d0cf6fe280be6708b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE