CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fba90032aada393f40953ed1bcd3d3ba_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fba90032aada393f40953ed1bcd3d3ba_JaffaCakes118
Size
96KB
MD5
fba90032aada393f40953ed1bcd3d3ba
SHA1
02222e18d8892d1e277a16a317ea18583b7a350a
SHA256
44c5765d75d30e597f99e92d6e7eea899452f4fc709b48e9fd43545585ac6a1c
SHA512
8d9e8d24dd6480345ff62d4800b9738f08efdfda713d98a4a4889d197d4e7e4cfc2af0c8990c185c8085e5a8813ace4f13649eccae61709a43571c1ac102e489
SSDEEP
1536:i64W3b/+sHTUxLuRWVOfMAjNk/+UopfOiwpvB:1b/+sHIwMqUYwpvB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fba90032aada393f40953ed1bcd3d3ba_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE