CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fb6d8a4673dc9f40e60211e664a63dfe_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fb6d8a4673dc9f40e60211e664a63dfe_JaffaCakes118
Size
93KB
MD5
fb6d8a4673dc9f40e60211e664a63dfe
SHA1
85c3dccc4ac192651849bd6d808695ef40bce557
SHA256
bf93a09fab1387972e77279e1b236da959e27a600e64223eed82f2e67f23c339
SHA512
c6f81f4f469750e270cab1b0ed2847e1980318a8af8d3ff10e53267bf7ed0c78432ecfdd8b2284a6c8d0f21646e6d3fde3826c3b048aef1a733a8bc6dd58ebdd
SSDEEP
1536:Zr4dVzqJdgJhjJKSYZ2KjpWC4Ch5Yv6r+W+IQiT:ZEdVzq4/j5itpWC4oqCCW+k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fb6d8a4673dc9f40e60211e664a63dfe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE