CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b6fc9f70fd8baeb1775e4dc139fdbb18_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b6fc9f70fd8baeb1775e4dc139fdbb18_JaffaCakes118
Size
85KB
MD5
b6fc9f70fd8baeb1775e4dc139fdbb18
SHA1
02e7aae0c11a2c1601db57d79ca9d5f69a36297f
SHA256
2c1dc326cf8db25c56ab3605ab63264e2baf2a5417a41a1a949d6c7e6cc66c5d
SHA512
679c0409a2ae57f81efa76fe9cc920f1d5dd371869046651b31517c1c6e5616db95288627a3b663804e1aa6ad893c50b9ff96d7ee7b420e11e52f99cc641f321
SSDEEP
1536:aI9js9B05V54qxdM1StnOM3+NfvUuf+pkCRL8tSjLGUDru:Xjs9B6AMSAtr3+65BzLa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b6fc9f70fd8baeb1775e4dc139fdbb18_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE