CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c933ec2ff04c27eeabfb493f403a595b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
c933ec2ff04c27eeabfb493f403a595b_JaffaCakes118
Size
2.1MB
MD5
c933ec2ff04c27eeabfb493f403a595b
SHA1
a4c63b6b429f2f243ae06615f170f8f1a8828085
SHA256
23dc411d67d56c43b5434f2de26f16171259bc725eced22f2e2c78d5b77ad8cd
SHA512
c7da0509c3ac8c253598e8b3597f8ac69e6c192e835b5ebd43bd5edb7f5a7c7c09d24508863a905dc1b92f2af9c3bf6fc2665d4969509c0f79e868f124d7fcd3
SSDEEP
3072:Wvrhwea2T+leLvHNMf8BYFqzal320pz2J:WvryX2TDvyf8BYAo320pz2J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c933ec2ff04c27eeabfb493f403a595b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE