CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ff4a984cde4661e3f72807b0cfeb773c_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ff4a984cde4661e3f72807b0cfeb773c_JaffaCakes118
Size
80KB
MD5
ff4a984cde4661e3f72807b0cfeb773c
SHA1
bde8a86ffdf5d646743307330eb228635fa320ee
SHA256
80a7283ad96befe53c5915a61d310bec3811466be7143026e3595ac7af71201b
SHA512
9f94bfbe015659fbf2511e6c1c5540a5febdf7dd87560ca4fe51955ae69cbc6c2553e915520498564441038a2cdde07a0ad647bcd5d8717f94a9bbc15839f8a7
SSDEEP
1536:sJVbpAYV9DPWYTCKmJsI6wBYykApVkxLJ5qC+Z5fHJ:sJ5SYVcCCKmJ76WYyk6cLJT+3fHJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ff4a984cde4661e3f72807b0cfeb773c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE