CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fec72979c8eaddbed195fa3d4f0b23cf_JaffaCakes118.dll
Resource
win7-20240708-en
Target
fec72979c8eaddbed195fa3d4f0b23cf_JaffaCakes118
Size
102KB
MD5
fec72979c8eaddbed195fa3d4f0b23cf
SHA1
1694f61b5e56d2d813aa97a096af61cbd90bc5b9
SHA256
50ecacc7465cacaef8be56b70a1685b8acb55b85223dafb89ec05cdc67dac1d4
SHA512
e33e402a04aeb9ba22ec3be1b4eaa7f8d8279225186df7db9a63c99fad12229e004603c4658d2ba0f6d4df2f84047c490e841e2e4faf577f75baf7b8d522a023
SSDEEP
1536:TD6K271gp7DXHQ49AdGXjJ0Lqk4nJjEp1YQrJOs+BxXGn:TDGYLwwiGzOqkOe1YQrY7Gn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fec72979c8eaddbed195fa3d4f0b23cf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE