CancelDll
LoadDll
Behavioral task
behavioral1
Sample
faa6db27a1b50b9de5a063e5eb8b925c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
faa6db27a1b50b9de5a063e5eb8b925c_JaffaCakes118
Size
101KB
MD5
faa6db27a1b50b9de5a063e5eb8b925c
SHA1
682152c06bf7713b3059640cf2fcb33a52bc2150
SHA256
05eac3a52415af5e5cf4a2e696541ac5c35bec183fdacd2dbf6b3dde91020c72
SHA512
f052000455668d575cc7774678f08e02b79b51db003e0ece9c11792313cd2db2d83bdab0a5a6fef3aede7bd24f75acefa3127d6d51933c3608f63cd7ede9ebe4
SSDEEP
1536:lmoLIIWdNE9jv4LsFgIiPpgBbTnftGUY46HdSbudEzHgNwly5l:02RWdNEp4LsigTFGUgHjdEKwE5l
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
faa6db27a1b50b9de5a063e5eb8b925c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE