CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bde0a767344d90e4e8e0efcaef148ca6_JaffaCakes118.dll
Resource
win7-20240704-en
Target
bde0a767344d90e4e8e0efcaef148ca6_JaffaCakes118
Size
91KB
MD5
bde0a767344d90e4e8e0efcaef148ca6
SHA1
9def448864aca7d23b0a5a660f7ddd86dccd42f7
SHA256
5f835bdfe59018e8bc8cbf32009672cc41aec0871b082416ed735871ce932745
SHA512
a830a87b9e66a200d6c3eef245f0744572aa300f574b5567f15d59542f23be9649e16bd3a2be5ba7b9f0df4d8b24f845930dc93ebf0e186a6669063298183aaf
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr7ulHujrCJwoZB0+MdtW5NFubfzVWKP17dl+:03/KeW8V3rQsuBb/qdtW5qbfYKP17S
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bde0a767344d90e4e8e0efcaef148ca6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE