CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bf90fc2423dc5c605380c7201a89eb87_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bf90fc2423dc5c605380c7201a89eb87_JaffaCakes118
Size
115KB
MD5
bf90fc2423dc5c605380c7201a89eb87
SHA1
98c9d944c255e7efe047420457cbb870b1684735
SHA256
af1eb5168e9d8c1e6d92e8646962958262e6da731190b3b518d87275d5cd2077
SHA512
8a4abc35018e95e6ec2542188f757c78770812714aba1da9e5dc6dd5d23cf30312dc320fa4200cd29f383180188c55d565ef8f93b9f0b8faffe49a6327b766eb
SSDEEP
3072:Ud5W8kw/jdt9YDJyC6AbMZR3Rm12o9jsg0iLqW4scW8/3Ci:Ud59bdt9sxSBmV9jb0iLqWrcW8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bf90fc2423dc5c605380c7201a89eb87_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE