CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fe24172596ac6d6518191d682484cf2e_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fe24172596ac6d6518191d682484cf2e_JaffaCakes118
Size
6.4MB
MD5
fe24172596ac6d6518191d682484cf2e
SHA1
bf9b39cb08b50c9f057ebaae12a6ba6b36182d36
SHA256
9193e9abbff2c2ea69a67da2ea6c1d47b07dd8a5668f34f5fff111461961a5c4
SHA512
2458ed5e601e6bf0153b39cb730f5fbae243e260619b66ab3c461f5fc2996de32c9129b973de780e212d12da5cfbd3964b71d982b1e0d8eea5625e5296fab4b7
SSDEEP
1536:xYPmds0xHGI4yJ2hk5VD4DIB/Ey5SA2dwhydeaYYFTuoDTEuXAf8BcuVA1RS:xYP214yJ2xDIB//KwUddf9bTEuQZaAjS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fe24172596ac6d6518191d682484cf2e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE