CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f06be4af0a7032fcda46077834433583_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f06be4af0a7032fcda46077834433583_JaffaCakes118
Size
88KB
MD5
f06be4af0a7032fcda46077834433583
SHA1
7c37f60367fb2d2d8d412b5bf13025e599033c53
SHA256
70aa1adaac67120d12e0b5a1e159ca65352e271ac0e41e37a4b159d9b02475c7
SHA512
29195fe6a840ad4c46d7e207c0ff829ab53f51c89b2487078f8762a8490c1e6d97a86728a9cd4b96846b1e6d6302a8193dcc4b491357b46d7637ad44423454eb
SSDEEP
1536:zMHSIHT9yM8vKOZNOAx9u97mAkGMdH0MceCF3FOcjE:z1QT0hvKONkKAgvs14
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f06be4af0a7032fcda46077834433583_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE