CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6adf2cc045ee69a3b5823b3c837fbb2_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6adf2cc045ee69a3b5823b3c837fbb2_JaffaCakes118
Size
97KB
MD5
f6adf2cc045ee69a3b5823b3c837fbb2
SHA1
bd96dfbbd47a2e9290a317a948f560df73d5a433
SHA256
a5f03fdaeaa43266ad0e68aedb1996094541d390ee23f8e7eeecac7c72afffe2
SHA512
bf513e171609f00405747fc9cf8d9531f4557ca1c8543560269967a42c846c3be91a0d8e4a8485d90ca691752df4307bc6875c9063f4d489cfa39415d27392a6
SSDEEP
1536:7rOUbmJ/ZS8DDfKoBr5kTBatQj3NVLnRFJyNP:FbmhoODfph5k1zNVLtyNP
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6adf2cc045ee69a3b5823b3c837fbb2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE