CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f9b820e90c44f7e72b715c9a6fce7c5a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
f9b820e90c44f7e72b715c9a6fce7c5a_JaffaCakes118
Size
102KB
MD5
f9b820e90c44f7e72b715c9a6fce7c5a
SHA1
899e9018ff8bc03c022dddb00744f04b01c1aa9c
SHA256
1332f8424982616bd1a5e8b1abc39728004b3f1dd2ae31dbcfd55140efa89851
SHA512
91b7330cc674990ff502fd1ecb9654deea5ef8e9ec341e51a5a2559eb22817a693fd7ddf4d704fd5ac46a1efc95624fdcfd7728274146281e750ae1b9235f790
SSDEEP
1536:7rOUbmJ/ZS8DDf4a/cLs6Ves8pR3FYRua9i:FbmhoODf4ecLPws8pR3B
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f9b820e90c44f7e72b715c9a6fce7c5a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE