CancelDll
LoadDll
Behavioral task
behavioral1
Sample
6ff48a8921ccba7c7f2de9eb5efb4374_JaffaCakes118.dll
Resource
win7-20240708-en
Target
6ff48a8921ccba7c7f2de9eb5efb4374_JaffaCakes118
Size
111KB
MD5
6ff48a8921ccba7c7f2de9eb5efb4374
SHA1
9dbd60110da5e7dfc2c4a9970de6ef2a0b889807
SHA256
b7e8e1575b8d24542598a2df1657aaa40f87bc758ae886d57040c2ada898e0da
SHA512
69a799631a852db1e853255f80cf657665f4e6470fc09a0d1b5d340133f377acc5b947950835cdbde3ebf6c34eaff3112e71114345a298bf3f79b0c39a62b1b4
SSDEEP
1536:TD6K271gp7DXHQ49AVfBIgk5Ydc60nPRQv8BV6HWaIjFudtI6EepLYA:TDGYLwwovk5YdQJV62xFud6gYA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
6ff48a8921ccba7c7f2de9eb5efb4374_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE