CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fcebf4df9d67db4246bc9a0f2d6673f5_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fcebf4df9d67db4246bc9a0f2d6673f5_JaffaCakes118
Size
103KB
MD5
fcebf4df9d67db4246bc9a0f2d6673f5
SHA1
276845bb0b9e1a93b21c6829d73f7e1a50585293
SHA256
069a6800f06fe2999342bfb1e69153f290f0fac839aa982b24c86fd60f3fd37c
SHA512
21ae97d14ee3a326a3dd5a10c2ba57d27c73213a149b2fd3fe41217d690b57b438fc4f991985291b15830132da3ae2a8524b1476245cf56b8a41773d54c23af5
SSDEEP
3072:LmFty1L8gDyO2Th0pnwxGj0sfrJhUYAIZ30mHAc3:LUty1Fybh8nwAj00JaYAw7b3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fcebf4df9d67db4246bc9a0f2d6673f5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE