CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa417e27034c3cf878703902de959c7b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fa417e27034c3cf878703902de959c7b_JaffaCakes118
Size
101KB
MD5
fa417e27034c3cf878703902de959c7b
SHA1
b8e563ea254a179138eaebf023d9674b9ce2e1e5
SHA256
0bf7e73bedf38021d60d2bd5d01779b244c26ebd0d2a849bfe52ab5645c86bb2
SHA512
371badab92e60a89c88cda9996b1e3d55097fe65616bd387a24d8601614df8ae1a125aef71838ec539e6be8cd98a6b0837568e156c1fc3cc6603874a228f5d14
SSDEEP
1536:e8/mATyLDMEsXTzObdXefoJfPjTgCLUxosHe7j7YGUH3EbE+4HS8A:YwgIEcOnPjTgCwxXHyjEH3xA
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa417e27034c3cf878703902de959c7b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE