CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6fcabcc82e540733ccee29b77e5aa567_JaffaCakes118.dll
Resource
win7-20240704-en
Target
6fcabcc82e540733ccee29b77e5aa567_JaffaCakes118
Size
106KB
MD5
6fcabcc82e540733ccee29b77e5aa567
SHA1
f48668e42c15d846e92be8728a4d86ea13a86b31
SHA256
1ddb2f7a2c6751f0bab73cadac1a13897dbde306beeb6db6012fbe973aa5d197
SHA512
000b61f66f80b43742d0aca2db044259799732e031b29795aa095ee13692922c365d202216a995eabbbf0a7c2a900afeaf998eb95e53c3fdc68d00d3eec9ee16
SSDEEP
3072:LmFty1L8gDyOy53ZU9LeR/tz3Sy9BxkmHT:LUty1FyR53ZUxeR/tz3Sy9BimHT
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6fcabcc82e540733ccee29b77e5aa567_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE