CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c267064373dc63d6bb20e5628ba9e30b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c267064373dc63d6bb20e5628ba9e30b_JaffaCakes118
Size
91KB
MD5
c267064373dc63d6bb20e5628ba9e30b
SHA1
8d72c35f2d43daa31449ebfda36de52f61a2b1dd
SHA256
eb3e6831a3cc34a33c5add2e08cea5c556d8027de7210e2f874d2eefe9d0deea
SHA512
6881d6c1de409dc9cbdcf7401144a8d377f7e05e5532930c9dceb328fba45d785fc4a5d7bf480b97fa5c2438fa9500201a4966af2d0710723763e877e8cc149a
SSDEEP
1536:i64W3b/+sHTUxLuSYHdpqfpUB5rkEd3It:1b/+sH1HHcpUj4Eet
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c267064373dc63d6bb20e5628ba9e30b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE