CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f06dbec7f1e0e5e631adeb2d22b494d6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f06dbec7f1e0e5e631adeb2d22b494d6_JaffaCakes118
Size
91KB
MD5
f06dbec7f1e0e5e631adeb2d22b494d6
SHA1
4f0117f0a60f9ee6ebad990259b919be2ec75c3d
SHA256
de1baa3eb8f696076184e370c189981d921ba186f7752d964977430724f5b65d
SHA512
16c5c41aa35c702dfa0db51a3116c9fee30385d179362d41f3b68dc0569d8b20ef57b102245777fb3a6b3452b9e1adf8c888ebbe5bb43e197ede9220f5dbbe82
SSDEEP
1536:oCIHAdq3SbklcbDL3njUKRhJZOh+q8yHvjJQx:oIdqCbk6bn3jUKRPuhJW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f06dbec7f1e0e5e631adeb2d22b494d6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE