CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f669cd2b8e86d4b11b4c41b98cf51d3c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f669cd2b8e86d4b11b4c41b98cf51d3c_JaffaCakes118
Size
78KB
MD5
f669cd2b8e86d4b11b4c41b98cf51d3c
SHA1
367a2f220c67d5241e528d26ca0583d03ff34582
SHA256
8b1ee68bf309b22e8feeaa969c69ff9d42cc6c1b748f6c61cfb421b106efd729
SHA512
c55a04d76c9e5ca7695f68fab13da7d3453e904f7a4abb23d01d24dc11760923fe70f1b03d5f9326eaadbc696de60ae38addb5890ebcc762e102f62d42bb5cd0
SSDEEP
768:A6fOqADHSoXHT9ExtB32BkOPf8t8mKEGtyDBKpt+GX3Lsu+RQcMLeRDtiCEzAf4m:zMHSIHT9yM8vKO62QxiW4f4VOmjPC/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f669cd2b8e86d4b11b4c41b98cf51d3c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE