CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ff0825cb924a79e3dab5a4f9b9581122_JaffaCakes118.dll
Resource
win7-20240729-en
Target
ff0825cb924a79e3dab5a4f9b9581122_JaffaCakes118
Size
121KB
MD5
ff0825cb924a79e3dab5a4f9b9581122
SHA1
9d0d915b449f56b36c0b579e85fb3b0d65fb1ba7
SHA256
95eaabd2f4044553877104d157dfd6bac6b870916cf2523dd16741088a116782
SHA512
e85ddd6986e51589a9ff726bb9c8476ee5bcdeed598921de02b43b27a7a421f43ae472543e1c5f546a92e00ab5229803dc1725f81015c2fb160ae528cf58dac5
SSDEEP
1536:AHEkUaLBF/H8XEP+qkuNIWtL0HP98hEvRmJOND:vEj/cXEfRN/WvmuvMJQD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ff0825cb924a79e3dab5a4f9b9581122_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE