CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d189655c4b14fef86205e9eb7f3bfc9e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d189655c4b14fef86205e9eb7f3bfc9e_JaffaCakes118
Size
94KB
MD5
d189655c4b14fef86205e9eb7f3bfc9e
SHA1
e4ed7f78daa09f156dba97b5e4e05075f20c1457
SHA256
96060e7ad960fa79588c3c9f45df336bc5fa1d427d5757bdbb04e58c2630ca7b
SHA512
45060bd267fd3ebef5b442debf87d66425b4251dbeb48cfba7ce599c62c75b6cdaefc1220c759b70f12ef9d8e32bc6d4f300caa177f5a14e5c238c65abf915df
SSDEEP
1536:6EFPU3vR6PKO5ZrBF57ruCZ4pEGdOuJiEegSpZVftj98rPjEo:1afR6TbrBFi/OuJiIilp+P1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d189655c4b14fef86205e9eb7f3bfc9e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE