CancelDll
LoadDll
Behavioral task
behavioral1
Sample
faf7c038065af48fa737541ddd9052f5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
faf7c038065af48fa737541ddd9052f5_JaffaCakes118
Size
113KB
MD5
faf7c038065af48fa737541ddd9052f5
SHA1
24379cd36fd4f255fa244fec8b951e4f679bf899
SHA256
b91e591b3f2091b7f77fee1b5278af85a4894139ff8b01738ae747993c2f9e5e
SHA512
b74205efd892b1d427b6941bea822a3cbfeac82b7603db9da2bb9a3684bbb74e6b4b1ef1b4e4d4d84b4c7bafe756822fae7b04a497d2e58d4751b85e91f8072f
SSDEEP
1536:4G31s6OxArk6ytVNWaRULYXpafwq8YPhfrfKfjFFxGsF6NFHnvoQ8isclHf+DC:B3wxV33rFZaflP1LKfj36HQpiptfAC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
faf7c038065af48fa737541ddd9052f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE