CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6ba6e309a9ad57cfa12977410a7661a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6ba6e309a9ad57cfa12977410a7661a_JaffaCakes118
Size
104KB
MD5
f6ba6e309a9ad57cfa12977410a7661a
SHA1
6ff5431f22985befa4aad7cb5914faf9fb6bd683
SHA256
237fc19fc54b8a390886bf6be05f7a96fa5454b92a042378fa1e0e9fa7744b9d
SHA512
5b7b7888cbd544b4a0311a8ddd1134a51c15883dbc52365d61c4bf5df90d218f459dff2d11d7d55f6709f4f1f71a66c18086697d0be5610554e50106f0c2821b
SSDEEP
1536:TD6K271gp7DXHQ49ArLl0N3IvYsKQ5V+g7epP75aRm32snNU4mcbvts/ykc:TDGYLww2Zs3KzV+ceJ7P2wykvtWykc
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6ba6e309a9ad57cfa12977410a7661a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE