CancelDll
LoadDll
Behavioral task
behavioral1
Sample
dbd6f72c61cf69e9d8a4da8d51e7ea4a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
dbd6f72c61cf69e9d8a4da8d51e7ea4a_JaffaCakes118
Size
87KB
MD5
dbd6f72c61cf69e9d8a4da8d51e7ea4a
SHA1
f89df51b6c3b9d29557115038acfb2f358efadbd
SHA256
082c8fb047d6222785e52d5f5252ee9dc5fd152226431d73072beedaabf12596
SHA512
d77f2be5643e68f6fa7c634c0e9d719ca9f41653aa7b918078a4af92f627f89ee512d4e97fab4f74b62d21fa8291caf697024182372cd919c3c60871a1b80dc2
SSDEEP
1536:SM9jsxvhBfng/347hFImWXhVREBy1948UuY:3jsxvof43qVt3FtY
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
dbd6f72c61cf69e9d8a4da8d51e7ea4a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE