CancelDll
LoadDll
Behavioral task
behavioral1
Sample
069d7398a880b9837a86c18afcd73ac7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
069d7398a880b9837a86c18afcd73ac7_JaffaCakes118
Size
81KB
MD5
069d7398a880b9837a86c18afcd73ac7
SHA1
c18f9e1748c6f4b0bb4124b5fca5678e13d67cfc
SHA256
cff073edc903c23e869570f395485ec0a50e422632422345a7a95c9bdbf30982
SHA512
27133844100c863a4c1d649866a397a9eae1abea7ced80917812378955d7e743f1d017576f7ad30fad651fce7e939a11a1c6c8f1a60d3fb1b8589cb833f7a6cf
SSDEEP
1536:qWNTI2j7IGPmy5guIRp7lgfRcUI+MSm4GsAuH6r:qWNTHTey5HCvccUCF4quH6r
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
069d7398a880b9837a86c18afcd73ac7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE