CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f6d874f9f25448d940d5e4d4b19e2bc9_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f6d874f9f25448d940d5e4d4b19e2bc9_JaffaCakes118
Size
91KB
MD5
f6d874f9f25448d940d5e4d4b19e2bc9
SHA1
ba6ddac095d767601f0af5388e39bb0891105827
SHA256
c87683ecaa9ef6b20aa46e03cae5ca0577235327a7db81b79aa5be57e2ccf9b7
SHA512
bf9e10a64f943e6834ffbb263affdb50fccdc7f7b1c682f5fb164a268346aff00f18873940bc3c3fe6d23c5a18dad07855f4df9ed4b540f31d5eb14fc9c66ae0
SSDEEP
1536:7rOUbmJ/ZS8DDfy+AcZIp/ejiQFQ0mPA7dtXsGMk9:FbmhoODfy+AcZIp/Cis8AJtXsGMW
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f6d874f9f25448d940d5e4d4b19e2bc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE