CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f71eab3ea7dc48487d8ac0d58a2b7be4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f71eab3ea7dc48487d8ac0d58a2b7be4_JaffaCakes118
Size
127KB
MD5
f71eab3ea7dc48487d8ac0d58a2b7be4
SHA1
6bdc09166fd6dc21bd34dc8e21784722a7cbf994
SHA256
fdce427bdc96b3ce119acc9b2aa1e9100b81d1151fb2903b907d86a3b261aa51
SHA512
6f6456545e21f260d5344a8ae441b730172a89fe34746fce274267975bfc734d043f40b075c2226eb5df05ecf174dbb89756c5fe3805657c792644972dd3a770
SSDEEP
1536:AHEkUaLBF/H8XEAs2IATyF9qChbgpdDBgq3H9bd:vEj/cXEAsTATG9qCunNgQ9d
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f71eab3ea7dc48487d8ac0d58a2b7be4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE