CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be3a8561e45c0c3227789b7e45e28c83_JaffaCakes118.dll
Resource
win7-20240704-en
Target
be3a8561e45c0c3227789b7e45e28c83_JaffaCakes118
Size
76KB
MD5
be3a8561e45c0c3227789b7e45e28c83
SHA1
f8cbabd40a2f453f8b81faba5c0228a0aa775057
SHA256
9f4b6017563c7e61890267b6c5e43e87e5dd012b9d28e94f81edc95e2f0b5a0d
SHA512
b210dc8fb7b945cba5a7d27748acaeedce059be67fa742d1d04494ee3a9988780b1481ca0cad3be5c4ddb8d56bb1cbcf852c0f7c3618eb3f78f415048950fb06
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZChO+68CG7lhWMGyQ+u:Ud5W8kw/jdt9YDJyCha8ToyLu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be3a8561e45c0c3227789b7e45e28c83_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE