CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f0a24e43becb05c4ae58613dd89e414c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f0a24e43becb05c4ae58613dd89e414c_JaffaCakes118
Size
88KB
MD5
f0a24e43becb05c4ae58613dd89e414c
SHA1
2f94dfff2c0143595558e1a3c28458ce5cf203b9
SHA256
cb5f78cbe1dc3173b87b7024d2c1333cc5bae72333253ea0d8dae316d1e5b65b
SHA512
26ba2e30fae30659b7c9279eaa94068111313a712f1f1c924cf2e83b9ee9e67487cc40ed67da06b55d6415200066b280e62c21841662956808e350d77323a03a
SSDEEP
1536:fRlNzx5Bthtq8FLJAzZd1xAYkszkKY63CIY5+bYEqv6qQhE:fRlNzx5Bpq8FLJAzZnWYkHx6S/+8jnH
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f0a24e43becb05c4ae58613dd89e414c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE