CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa567dcd9178e9e2ec21817d5346a1d5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fa567dcd9178e9e2ec21817d5346a1d5_JaffaCakes118
Size
86KB
MD5
fa567dcd9178e9e2ec21817d5346a1d5
SHA1
1cc2a72175c44d693679fb8be2316dac3c8b375b
SHA256
e8435932cd041282a512e3ea1d372859721f895121e6229b64f2d12e366c59ad
SHA512
1775ae95db743fd180418e5c94abcd499987c714751dea9ad7bde5e64fc02889cd96d4d34f997620a77a6bb55130c3f8f50bc3cfebd1bb8cd6dfbb44a5a5c9de
SSDEEP
768:57pOWNXIsI2qSP7IEK0H/ROaRtJmE9amKEGYdUKLUqkanIpDpg6GB1uO539dxGSl:qWNTI2j7IGPmy5guIRpCVSipvDtt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa567dcd9178e9e2ec21817d5346a1d5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE