CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6ef378e7896ff445b96f55dc2b6e0d9f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6ef378e7896ff445b96f55dc2b6e0d9f_JaffaCakes118
Size
96KB
MD5
6ef378e7896ff445b96f55dc2b6e0d9f
SHA1
6530543b90b3c82b610802bedd4a8256657573af
SHA256
fc05efd59b40de7920c39fcc725e4967fe18a4d10ff1dfafcad973514427ac46
SHA512
66d5132fbff70addaf0f0b5ba4e0c6b7195cb911224ba7232f6adc6fae0f1623c10e5fbbd9f9954479777cbdedbbeeb7d527686638ba8439f5fb63197abc3a48
SSDEEP
1536:LIuBbJUd3hLZDuruMXU8MAWXLlB8C4OUO2ws2AZUa9NgNtCp0UnJ1fVxO:chdxwquU8MAWXLlB88a9NgjCHJtVxO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ef378e7896ff445b96f55dc2b6e0d9f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE