CancelDll
LoadDll
Behavioral task
behavioral1
Sample
be821b2ab9bfda9d12734422f5be841a_JaffaCakes118.dll
Resource
win7-20240705-en
Target
be821b2ab9bfda9d12734422f5be841a_JaffaCakes118
Size
101KB
MD5
be821b2ab9bfda9d12734422f5be841a
SHA1
14e4c8c2a719f5b64777f7c44ef8859e57424a1d
SHA256
dab2634ab9a40e3ecf48b7c38996042d1731af615501857520be19be9095dda2
SHA512
3d13c68479ecc58cbf391e5ba1b405b513ec2952cf3079f4a1d664f0421bd353a5e6a3bc3286f7345854d04e612c8379c84d5572c9fca2ef9ea125626a7d328b
SSDEEP
1536:LmSQNbJE1vj8gDxkO1GkEK9lV00ZdDzGF+8rtHAFKOLisO/ivrqpG:LmFty1L8gDyO1GkE50CjAFzpwcrh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
be821b2ab9bfda9d12734422f5be841a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE