CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c1928a1374d3716aba12713ede6b8e50_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c1928a1374d3716aba12713ede6b8e50_JaffaCakes118
Size
84KB
MD5
c1928a1374d3716aba12713ede6b8e50
SHA1
6bccf4894844faf44466bc2f7b48298229d7e6be
SHA256
b875ef755f686d55c8f0889fc8748738c92438cf6932593adde2be6f73b82483
SHA512
e34205449c857b0793a284b593db08458ed6e4ea7c9598f5b2f6414e2eb35e02d5fe00234a91aeafd669bf90f7f95bd81dafd22cc7883ed2c292ffc2f6b0e938
SSDEEP
1536:YJpsqgQUNFs/L3BBJRvJ2+6Q7h0l9a57bk:YJOqgjs/L37JVJ2Ao9ao
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c1928a1374d3716aba12713ede6b8e50_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE