CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fb3c803f1fdaa36602332b355e6a705b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fb3c803f1fdaa36602332b355e6a705b_JaffaCakes118
Size
97KB
MD5
fb3c803f1fdaa36602332b355e6a705b
SHA1
60c30c1706d22eee891be9c2591d17dd58bd13cb
SHA256
3f47f01635de41d933e3522dca85486dfc6e10700ba616f2615f438f0743f824
SHA512
b689c3b8d817a5650601c3bb1eb4e11cb0108b450c75ebb5f095ca416360b6162ca74d035372863ec351cd04be3fec059e25f44d4112584afe6620e4e6b0731c
SSDEEP
1536:YJpsqgQUNFs/L3BBJ1NwTfBorLIX1WZHMDcqlSNUYZzgXBu87B4F:YJOqgjs/L37J+WrLO1WZHj3zgXBuiuF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb3c803f1fdaa36602332b355e6a705b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE