CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fcee7ec6372e93a44bb9e1a19076ed49_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fcee7ec6372e93a44bb9e1a19076ed49_JaffaCakes118
Size
106KB
MD5
fcee7ec6372e93a44bb9e1a19076ed49
SHA1
30adcb3d704afc187783e7149b1874dc1cb20513
SHA256
48255c7cd16d9b802abd7580ad9bd52689e728106cbe058b190d727b9fcb70d6
SHA512
484f8db2b3d0f6b659e504860fbc9fca568ae2e89261699f9856cd09b6cc51671329427b92ea58e33e83b0d122ad7d9712fb2d269887d586f4d9ed0d233fe375
SSDEEP
1536:TD6K271gp7DXHQ49AcCr/zcWfIgz9q/PmgnYK9SQnSnvjTEZyo:TDGYLwwPOzcWfIw9AO1K03vjUL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fcee7ec6372e93a44bb9e1a19076ed49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE