CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fbd798bb1c531a8ca31ec208bae87d7d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fbd798bb1c531a8ca31ec208bae87d7d_JaffaCakes118
Size
99KB
MD5
fbd798bb1c531a8ca31ec208bae87d7d
SHA1
0938477ddd52cb404b2e03ed0f6f6c1b3ea893a4
SHA256
d0d1344194c999f8678dbed7dc97ce399fd3eb01f5d45ea7a6fdad45fd5d874c
SHA512
f7b9ad167b83c7d49fcaaff2c372854f5f64df6a6ad8e78e6641829b007041ba1897b0cfa05dcaf280c74226160b19e5a2a5ae3f4583bfde4337aa00dfefa2fb
SSDEEP
3072:Ud5W8kw/jdt9YDJyCX7I1riU77BWPxAxP:Ud59bdt9sxLiiU77BF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fbd798bb1c531a8ca31ec208bae87d7d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE