CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6b80ea7258578c73c8e096ad8d95e25_JaffaCakes118.dll
Resource
win7-20240708-en
Target
f6b80ea7258578c73c8e096ad8d95e25_JaffaCakes118
Size
101KB
MD5
f6b80ea7258578c73c8e096ad8d95e25
SHA1
1951ccb0b5ed6938eb3e983eba857e4865020ab4
SHA256
a46987072c880ef76522379795cf8a2b7b20451364a9e1ff7235d889e07021a6
SHA512
bf4b89c4e2edb7202f6825a1dcc3d6f493ded7071553ba0fc566483ceb60575ae1035f70cdb32cf5f2ac4b2dcf18803195a29bce89e3bdf5be8b296bf760f5c9
SSDEEP
1536:7rOUbmJ/ZS8DDfV6XMzfwL6Lf8woVpon2mL0z+k2Yp0TOIpUJ:FbmhoODf+oImgw8po2mL0z+k2YCTOp
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6b80ea7258578c73c8e096ad8d95e25_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE