CancelDll
LoadDll
Behavioral task
behavioral1
Sample
d6cb4573cabe4b6c4381e638cf1365fd_JaffaCakes118.dll
Resource
win7-20240903-en
Target
d6cb4573cabe4b6c4381e638cf1365fd_JaffaCakes118
Size
101KB
MD5
d6cb4573cabe4b6c4381e638cf1365fd
SHA1
fcfe8c6fd7a9a1fbcd4af6d17ee21db3c82da855
SHA256
de76feabcda53ae699ad9f004b8f636852b78f47e3467cabcba39e64df96b6ab
SHA512
50627f7a6478cc5da68a0151970fdd33b8f6b3b988659a6dc6067e987163494a5353ccb41094e647186fe6ddbbd06f520a8d0a95e69fa9f2000da9f75b6c9713
SSDEEP
1536:AnSIWWZU3mEobfts9fdgnJV/wIctLXjxrAlE5kM:ZF3mECfqFyV/DcglE5kM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d6cb4573cabe4b6c4381e638cf1365fd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE