CancelDll
LoadDll
Behavioral task
behavioral1
Sample
827262eb2c7f23902a7d84e5e61e3a8d_JaffaCakes118.dll
Resource
win7-20241010-en
Target
827262eb2c7f23902a7d84e5e61e3a8d_JaffaCakes118
Size
95KB
MD5
827262eb2c7f23902a7d84e5e61e3a8d
SHA1
dd9c3655760a3e847dab3f5bfd99bdd7be3d8cd7
SHA256
92ff71d4cbfed6c61b3cf8a4716f56c2fbe6d95c30cc8ce5cc0012fae90e056f
SHA512
3e3f4a7f748bf0d8ff0cbffb565643aed32bf688318ee320bb9767fcc184172dc57f18c3a1e3c459c81b6df6b042d1f25b3a7d34f154c4bc05d42c647bd04799
SSDEEP
1536:qWNTI2j7IGPmy5guIRpX34k7ufI/7ncA/iAmLZlE:qWNTHTey5HCUkjxr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
827262eb2c7f23902a7d84e5e61e3a8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE