CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f9a773b0f951ee99916424e6f89d3fcc_JaffaCakes118.dll
Resource
win7-20240903-en
Target
f9a773b0f951ee99916424e6f89d3fcc_JaffaCakes118
Size
109KB
MD5
f9a773b0f951ee99916424e6f89d3fcc
SHA1
f44f3fcf1befc2135395b56df9c1ca5ba331bbc8
SHA256
6548938b0ebb0fc9f0205e072d6418576d6b66542c0108add9321e57355cd14d
SHA512
77f1f3876ddaacd9fa24a7ade03b8a7d37af103550b562714e36b15fa4c95313d1440644a5632fa9606a9717a56830a0237f8250fd857e2bc7ccbd2979ff24af
SSDEEP
3072:OB0BTYCs4jTKHGtE621CxXD1HMFHcmtND6Q:OBakCPTKmqvST1sFHTDR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f9a773b0f951ee99916424e6f89d3fcc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE