CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bcc79d4bf265f636b4f2d44816444f7f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcc79d4bf265f636b4f2d44816444f7f_JaffaCakes118
Size
103KB
MD5
bcc79d4bf265f636b4f2d44816444f7f
SHA1
3c1445d32565d05445e4374e41bb5cd33f7fa199
SHA256
81ef8c6c059c386298b3b2b8da19ee4617c15ba41482303d8d40a9edd5d6f9a1
SHA512
66600c792cc4f6c180af09599557b7a6390e8da4a85d6532654d889449f13af3b0f7f3c5f79c52e77158cb04f26e979261dab3896f255a4619bc91beb27ca2db
SSDEEP
1536:RzL079679wNSa7cxQNQtcPKRUJa32ueKnTMsyySjhX6:RLm9679ESuywQtR37e6TMs96X6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcc79d4bf265f636b4f2d44816444f7f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE