CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6bd545c2067bf38ad8dc60f253d1b0a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6bd545c2067bf38ad8dc60f253d1b0a_JaffaCakes118
Size
86KB
MD5
f6bd545c2067bf38ad8dc60f253d1b0a
SHA1
735e0686051a221e29c8d912f4844ab465d32403
SHA256
84ab1ef15f29ebc79fe919644bf34750eeba243bde1dadb4ec202a0397cacc77
SHA512
f7e32cdb77236d2feb9cf5877eedd388747346134538f0482d07f2160020dc3f6ed8d5ee2876e8b74fd258ed790800224f48db72f3c2347bf99f73efb1528c1b
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvu2a9Flj0DfbARbr0QyMV5teKWycQCF:6SFMDgVswFLdNTTjcuQldk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6bd545c2067bf38ad8dc60f253d1b0a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE