CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa3c89086d5ec05af94311c0ca67c296_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fa3c89086d5ec05af94311c0ca67c296_JaffaCakes118
Size
100KB
MD5
fa3c89086d5ec05af94311c0ca67c296
SHA1
f2978e9e5b6c5d150ebb93e274b3b54ce7f78a84
SHA256
da7cf552984153abae98f186e94de99a530fb8967f3e8c469a7c05266f5fd474
SHA512
b186be9c6d78c2629a1d5f43078b66db43d846e7d3a6acfcaf3acfd041c22ef180d6f28ce16c3446aa24c0001c8d965f10428fbbb9792579a07c269187c9679a
SSDEEP
1536:YXHoPktJDJg52W0Iei6EjX5a2vqxpMMiz19eF/24TQtKlBZrQM9xH:cftJCL0Iei6kFvsqqTWST0M9Z
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa3c89086d5ec05af94311c0ca67c296_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE