CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c21762216a5db038b21b1cbbc1686a9c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c21762216a5db038b21b1cbbc1686a9c_JaffaCakes118
Size
101KB
MD5
c21762216a5db038b21b1cbbc1686a9c
SHA1
418275372db733d125dd0543b47b7a673a9ef48c
SHA256
6c14fb306e7e28855071f256854f3654bca2b1fbb64b54f7ef51724c1e8224b9
SHA512
ffe4414b41acc1fa4586b6026a1659fa15c5e4e5bfda0b494d5653d1885f46bec66349b8f014167211007fc6aa9d7d0cd121ba2201e6d3a470b34f863ff0389c
SSDEEP
1536:RosSg4ngB/6hVUBASkpQzI/KN76pAFzeSd+4qCdgF/Qf76rpQ892LFOt4:1SoB/67xpQzI/Kl6pm+4xd374ZKZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c21762216a5db038b21b1cbbc1686a9c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE