CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6f2974901354c476abd1b06d52f5ba5b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6f2974901354c476abd1b06d52f5ba5b_JaffaCakes118
Size
89KB
MD5
6f2974901354c476abd1b06d52f5ba5b
SHA1
b1f63b684e9f834e4c8e5cbf4e84e988b6ff4066
SHA256
771602b9b4bb8edc43cfeaeb11a85524027bcbd46f3d96fc90af4d15fa792f0c
SHA512
d57e5844d5cf8b33bafb9ba7e922f241e807cd7c93f71a3880eddbdc7a602de2bd14abe27d9a54a10e0bb1e92cd16dd7becdd412ae9c6fe18a42c9ef5da02e00
SSDEEP
1536:MxvNbz0ZBTYCspq7v1rSqEcQDhU0c9rBoUWu57:OB0BTYCss1lEcQG0c9rBoUB7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f2974901354c476abd1b06d52f5ba5b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE