CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fe3efd72c6808eb814f7aeea4cfbe2b8_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fe3efd72c6808eb814f7aeea4cfbe2b8_JaffaCakes118
Size
93KB
MD5
fe3efd72c6808eb814f7aeea4cfbe2b8
SHA1
b71658148b1c0fa5fd0689eb0e9a9a214fe9d352
SHA256
6f0ca4795d21492f179b1ddc26ff72a1f99e96aa0d3ac3b35debcddd224688bc
SHA512
92d5ec94da0ab7928abfc4b0c89bb153f6111b267b35a01e960588f2c13792b8ea966fba7200ff4322a007143cd78d4c817ac490efb6a284a99d1a656fa24bc2
SSDEEP
1536:OoKR1YFY/H4SXxyBvaoaeZzYuCxPg+bHiINfsYsqWZBI:+1YZSByxaoaeZzYusg+ziIyhZBI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fe3efd72c6808eb814f7aeea4cfbe2b8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE