CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f662d877abd17ac513c9adf1a6c64de0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f662d877abd17ac513c9adf1a6c64de0_JaffaCakes118
Size
116KB
MD5
f662d877abd17ac513c9adf1a6c64de0
SHA1
34babaec1037d4eb672ca6e667460bf213c88c6b
SHA256
8e22388fc12407a177457b63d767f60c85b1e2c1984bb4537aa8fbb1952d8853
SHA512
9934e3c4a4ada6c6ef79a1cd1e650ff32f42d97aa2501966b44caccf8e82dff068a8bb519a7db5d64a62c652ea6c534d785a8654d2b6a129da57ab1c532bbe7f
SSDEEP
1536:qJOicqgmfzx8xnhBbgA6U86eejoUTUik4TTtn+0/aAzFvRqis5yBf8NUFPkcY:oO+Bd8Vh26DjoWVV+SzFvgi7SNUFg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f662d877abd17ac513c9adf1a6c64de0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE