CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fb2b30fb8d4a8d1d9e1602c6e7e3af97_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fb2b30fb8d4a8d1d9e1602c6e7e3af97_JaffaCakes118
Size
111KB
MD5
fb2b30fb8d4a8d1d9e1602c6e7e3af97
SHA1
378e4f98bc77e0f9ec6a4d42a62804161d232620
SHA256
45fde549ee6c35b9584942f4ab52ac5acd107ca783fed45fc6b8cc072f07c2c8
SHA512
594ca36a11bf0b94a5a2ffe40ea1497502ca1129b2d52a5f7c0b599a2dcdf0a282c52c206fce4271f562216dc408e03e29397254f3091ebd839ab71d8f094d48
SSDEEP
1536:TD6K271gp7DXHQ49AoUkqE1vbY0opsK683WJraN79mZcGf1TvzXoU:TDGYLwwDnj4p/BWJeN7IZNRv7oU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb2b30fb8d4a8d1d9e1602c6e7e3af97_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE