CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6a28c29a36875b9dacdd543ef1512c33_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6a28c29a36875b9dacdd543ef1512c33_JaffaCakes118
Size
104KB
MD5
6a28c29a36875b9dacdd543ef1512c33
SHA1
77ec95c29cd7660c48089beffce271dbb3f3d067
SHA256
89f53e9e3c94dc8c4bfa6ddd2abb46946e6dafb5573ff03dd97b7982cdb29a86
SHA512
7081f169e1b120bc95a1cad2f198c8d31f711e1c0e37abb42962c4209fa19874ca9c64f8ec62211bddd22216efee51d1cc54ef0820238c5d749c65c7ddceaf47
SSDEEP
1536:TD6K271gp7DXHQ49ATq44eskP+ADaRJyj6vWQHSbrIZI28Jk2F:TDGYLwwiQAOqmTSbmI2uF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6a28c29a36875b9dacdd543ef1512c33_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE