CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6de941e38de2a5466dd1fd60772f2cf_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6de941e38de2a5466dd1fd60772f2cf_JaffaCakes118
Size
95KB
MD5
f6de941e38de2a5466dd1fd60772f2cf
SHA1
0f14ee2c500a8db3d9bf04a8ea15c759bb884e16
SHA256
94a2c5cff9933b99f2633fb112f2d5f6d72409048edbcd68ff89b9d97b6fcb84
SHA512
e11cf6b4d320b0d7f0f7ad54825a4c6c95645ab634d585920bb117bf68a16796e364c3088ffec9f8f47e65926950f599e2f77b3a7efd63aa7f88b291cce6294d
SSDEEP
1536:DjMKODJPutB+69AmJQA/LylnXVBFeGReDAbe7yTqnXdsHj2ZY:+MBpAmeA21VBFeH7yGXc2S
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6de941e38de2a5466dd1fd60772f2cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE