CancelDll
LoadDll
Behavioral task
behavioral1
Sample
daa7ded5670a616a5c7ca8615a26618b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
daa7ded5670a616a5c7ca8615a26618b_JaffaCakes118
Size
104KB
MD5
daa7ded5670a616a5c7ca8615a26618b
SHA1
190b78d71d22cf5fabe7d61b65d200cebd79c10d
SHA256
966ce6064b576616b1d0273ca16e4d7fc4e534c69a019260b625eb810e2fd832
SHA512
8f154e21345100c802d55c16e5f4a276bf14f7fe2fb91c1c6d381e8478e5b6fd6ac29a7ed8559e8c03d06201381fe075ac7afc139282190fb04135264fa37590
SSDEEP
1536:7rOUbmJ/ZS8DDf+JvSY7dVcbJOTnvqemOJekkCzRPfRyF28k6Syhxp:FbmhoODf+ZSY7ktObqedJeylfRyFX1p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
daa7ded5670a616a5c7ca8615a26618b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE