CancelDll
LoadDll
Behavioral task
behavioral1
Sample
beebc3e11e867fbc59146c70a34bffd9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
beebc3e11e867fbc59146c70a34bffd9_JaffaCakes118
Size
136KB
MD5
beebc3e11e867fbc59146c70a34bffd9
SHA1
edcf0c6af84fdb236d9cf0d110d2b812882f94e8
SHA256
e9c789fba0c851246abba9aa2b3155bf57219d722cfd27f19011836c34a7698b
SHA512
58aac62df7c5d3fa4d18993dd5b5bc4554dfd2fef2cc81544e38d902a757e9c7db0adc844f05b56718abf5bec0ae69f45365f36de1fdfdee8d63569c6dfe048e
SSDEEP
1536:MDEFUawhF/H8fOyuctg8iKb6Hj7a9vB0rfQi:j4D/cV1tg8Pb0a9vmjb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
beebc3e11e867fbc59146c70a34bffd9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE