CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6b781b90c4dc6f8e28eed73fae56b6e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6b781b90c4dc6f8e28eed73fae56b6e_JaffaCakes118
Size
95KB
MD5
f6b781b90c4dc6f8e28eed73fae56b6e
SHA1
b65b9e9817e00643f79abfc7bcf72cbce5a8eb01
SHA256
4135566cef888f6f668712376e787f7f0f1749c8606b4ce60ced60e880feff79
SHA512
a569d301179ec59ffeeb3dcf7848795e18a169f3eaf08167545d013392140cd581927091b0d4311b4bea6891fb8e41c216d09fac49219fec0e49c02eb1957862
SSDEEP
1536:RosSg4ngB/6hVGWszTHe7miFk7GT6umucGnrsKZu4:1SoB/6772T+6G6u26TE4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6b781b90c4dc6f8e28eed73fae56b6e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE