CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c054e8c29e85190bd2c6eeef6bba3ba3_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c054e8c29e85190bd2c6eeef6bba3ba3_JaffaCakes118
Size
89KB
MD5
c054e8c29e85190bd2c6eeef6bba3ba3
SHA1
b5e2e46b6991e2b804bf6f050205be799adf7d5d
SHA256
495941b2b08dc847e8d298da2e51c67846522cf0ac67f1f32d50878bba511453
SHA512
d2814024bdb2a0b4fabe39cae746243e1de407ef1c021cfe92a164fc160f4ca429dadc285ccb8af07df98d70979dc5d79d0f0c53ef93e994b2e6096b20129476
SSDEEP
1536:0pstl9F0gv/r7r2ZnmdhqpxEfavRZT9t7+IWt1skpYgdPOLrQn:0OtFNv/r7r0nYo0avRB7+IcKkygUrQn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c054e8c29e85190bd2c6eeef6bba3ba3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE