CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bcd3be214c564c70d4febc4788ce1eb6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bcd3be214c564c70d4febc4788ce1eb6_JaffaCakes118
Size
136KB
MD5
bcd3be214c564c70d4febc4788ce1eb6
SHA1
24d6dae1d19219a810baba53d414a1553f727cd5
SHA256
5fdacbcb0f5be6feb825cbd55e1389e6b9ab2888243bbf436dbad12de8bb553f
SHA512
bed782d309ec5362f36cd7d4bf8a53bbce8a7105cdb53b81f41c5cccf4680417c89b7c4e31060442d08c1f020aae696fa14e367c1b7aec113285961389d057d9
SSDEEP
1536:MDEFUawhF/H8fOPpo72tPJXn4q/0WUgigt6FTrs0ey8qRxnl5/S:j4D/cypoZq/0W9igtwrs0eIjnl8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bcd3be214c564c70d4febc4788ce1eb6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE