CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6825be0488d57a952e14f84030f6db4c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6825be0488d57a952e14f84030f6db4c_JaffaCakes118
Size
118KB
MD5
6825be0488d57a952e14f84030f6db4c
SHA1
bc2d89fcf849c687bf2b3797ffff121d32f8b847
SHA256
c289b0620ad50d6a715400c7cbe597b1255f7cc6cd84b4c5a03c2b9d90f8991e
SHA512
a48df7db18b2ffe8e9420d288b486ea0faaa908808124bf71666e4d35a9a43dbb39081a520986b165ce00a0f6445a7188177f0b7b955bfbb84db8270402c69df
SSDEEP
3072:gJvs2A6Xh/FUeRk4Xwb6Z3eCQFPpp2cvtjKFqk:dyh/FJvwb6ZYPpp2cZQl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6825be0488d57a952e14f84030f6db4c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE