CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fd125b1ba0f1bb4aedd8a573dd063f20_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fd125b1ba0f1bb4aedd8a573dd063f20_JaffaCakes118
Size
80KB
MD5
fd125b1ba0f1bb4aedd8a573dd063f20
SHA1
99ea2f4c1ec728541c6b18d279dcedf8e2f1aa5e
SHA256
34e0a525da89a01100a308a08213055e9c7ab6694d805274082e9063627e2f44
SHA512
c9f5cce6a04344629fb384c7876769153f5ce2f61bd8c6bd5b9fe42bf31872745cc291ded92df187bd6628aaf6cbe5c919bd5805a6ee5a17d52ede36be00cc69
SSDEEP
768:RlQ+TgPvIFkXu9j3ape/GfLlF9wyBbrk26bp25S6w7B63rQmep7+XI9GnMZKfbkk:SM9jsxvhBfnBcW3lXMEMsY8abEVrMPy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fd125b1ba0f1bb4aedd8a573dd063f20_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE