CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6fd74802c9df336dbd0d02bd3b95bdf2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6fd74802c9df336dbd0d02bd3b95bdf2_JaffaCakes118
Size
110KB
MD5
6fd74802c9df336dbd0d02bd3b95bdf2
SHA1
0a307fb03400cefac27773b742233f305ab8e191
SHA256
9c835ecdc7fbde0d6d6249f8284967373bf43acc474ff2187b7f3708cb5fedce
SHA512
a2bd9dc803d8c87f88a5c1246f34456cabbf5ff59728f34930a502496f44a9eeb418410b67318657848e8a1f0d50b926390b411c044f7fa5c1b9cedff238e57d
SSDEEP
1536:f3csYQYYkNtot34irvg/V6UBXdmWb7kVzDCpkWlW3TCS/f2Joq1zl7/n:f3cLLNtot34iU/QUBXdiekkWOSXI1V/n
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fd74802c9df336dbd0d02bd3b95bdf2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE