CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2ad60952b578f8d8dd215711c4d8734a_JaffaCakes118.dll
Resource
win7-20240708-en
Target
2ad60952b578f8d8dd215711c4d8734a_JaffaCakes118
Size
80KB
MD5
2ad60952b578f8d8dd215711c4d8734a
SHA1
501a2210c3e3ad6075ae73232c02379486be154a
SHA256
3108b026244d072ab79b638fb9bb46b53d7bf38abaafb2270ffc63e628c5ffff
SHA512
c8e546fb04d7f6c252fb566bcde0d782b7d2b84e4c39f1192024fc8ca708d805b397b9f9c595f6d312b24de27a77e1218e403941232277e39a1cac2ae0ec3d74
SSDEEP
1536:2moLIIWdNE9jv4LsBgIMhm0z3VkSenguJ8lJ:f2RWdNEp4Ls2Kyvens
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2ad60952b578f8d8dd215711c4d8734a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE