CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6f64033832be6772ed22698cfe119f65_JaffaCakes118.dll
Resource
win7-20240705-en
Target
6f64033832be6772ed22698cfe119f65_JaffaCakes118
Size
100KB
MD5
6f64033832be6772ed22698cfe119f65
SHA1
5d736fdeb354ff36140239c3c3cb98affc4e15ec
SHA256
c137a96898cfafb94022993d6581df4afd926e1213661898fc5e8aebeef7079a
SHA512
71467c542018de63205c655a05e736a6f90656d9afde0a4cea5a78c6528c419103c2c894cc01aa532c7a113ee627a1de47b54acf1ef719b0c2fd839b8f5293f9
SSDEEP
3072:ZEdVzq4/j5Jht8Ux1VKKlzkrBeNY6+v9A1Gk:ZIhquRt8awKNCBHbk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6f64033832be6772ed22698cfe119f65_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE