CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6fde9d2982006128e3ffec0fa0aa741_JaffaCakes118.dll
Resource
win7-20240704-en
Target
f6fde9d2982006128e3ffec0fa0aa741_JaffaCakes118
Size
96KB
MD5
f6fde9d2982006128e3ffec0fa0aa741
SHA1
24f5fc5c77e5063293c505b70d43581f2ce11f1c
SHA256
1618c85de004500e452a3c2a46fd2cf71f678cbedf0b7260088c28d7e00dc979
SHA512
120430bd5a06b33a7c68d57584f5733c16f9de57df990a606c5c83594b9fd078f692ea7fc170cd80d80af94d3c8e9f47cc35e9d878f483d2b6e0408567bd8252
SSDEEP
1536:TD6K271gp7DXHQ49ADhLQxIhRRCw8ZJQRVseaWX0QpeQoqm7H1J:TDGYLww/sRCw8ZJQLzX0a1M1J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6fde9d2982006128e3ffec0fa0aa741_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE