CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f729a1a6222ae71bd8524e7e8e67047c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f729a1a6222ae71bd8524e7e8e67047c_JaffaCakes118
Size
104KB
MD5
f729a1a6222ae71bd8524e7e8e67047c
SHA1
6f9fb05ba1b1cdaa6b7aa998c0d16e52fe57f5ab
SHA256
c4c4f7fb0b24e37f280705f5514cf0c730868afd4e82e1f7b7f7117c3c18934c
SHA512
c2a235188182449debf0cdf983785ac35847a7c48ee3ccdee3a546ab0973651e32e292fee4260d228ba39c401b5612f286d4f0d9eeb3fada191898a4276cd99b
SSDEEP
1536:TD6K271gp7DXHQ49AfHR6AH8ib02S54WWLuyn8RZO1rn9BCFMc9Jfv:TDGYLwwOHb0F5CLPuYnrCFMc9Nv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f729a1a6222ae71bd8524e7e8e67047c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE