CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa3f0d4bf785d195da15934c660ef809_JaffaCakes118.dll
Resource
win7-20240729-en
Target
fa3f0d4bf785d195da15934c660ef809_JaffaCakes118
Size
89KB
MD5
fa3f0d4bf785d195da15934c660ef809
SHA1
c32d437cebec7e5f7a4fa5e005d447483f4e059e
SHA256
59ad9790261b8625ab40a98155d733f2030db6b10a895fc95f059779268d5d99
SHA512
348887fde9f0970fa829a87cbfcac50e2d91bfa25740e884431bbd66fe734e3d393adde7577593c2ffd5481cbdee42a030c500f6b3b76641eb868e626b4bcb1c
SSDEEP
1536:zMHSIHT9yM8vKONiqUTBvbcvKPAnD7fDoQU2/dpbVvDltJ:z1QT0hvKOYrBgCPID7s4pbVxtJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa3f0d4bf785d195da15934c660ef809_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE