CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6768a0729be7a86ff004263b91e86be_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6768a0729be7a86ff004263b91e86be_JaffaCakes118
Size
91KB
MD5
f6768a0729be7a86ff004263b91e86be
SHA1
b93dd2ea6d870ddab3e6b52028aab1b2895cede1
SHA256
9eace458faa66bfc212d2262aaeeb8de8cac93672fc139efdf710693c1cac15d
SHA512
9d45446091cbcee60748060667186970a9453f3b195feb5b969dd168913267e86ffaa3d0d2fd8eefafba10262f79bb72f6ee624fe2193e8fc449667052969a77
SSDEEP
1536:m/AfFgqexfyUDrxqap8vIdoX3tO8jO/sslkeYKu0nNZNZ2Cg57FnJ3D74qL5yG:FfUxhDtZp8vIdCFjksslkeYKFFZ2LFJJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6768a0729be7a86ff004263b91e86be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE