CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ffbac7a5f8d71f7af130ef8ae8d3a6f7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ffbac7a5f8d71f7af130ef8ae8d3a6f7_JaffaCakes118
Size
116KB
MD5
ffbac7a5f8d71f7af130ef8ae8d3a6f7
SHA1
09fbbd836e18c8ddb055f0d78424c937a7b45fbe
SHA256
7613fb7de3e56d1d64c079a7394aa9dc3e518251333866938d0e9e1a95b4a3dc
SHA512
8186042701a00da7a7d8f9ba97f72c7b92372fbe78aab18068918a38077d450e9e8f57cd40c14c7ba29dec4c85fa082213dd254cf969d5a0d22f470911c258ac
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqArR7+sdZYC+rFbKAsYHsc9YmYSHyB:l9L1xm6hpbVcNsd0qksc9Y5eyB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ffbac7a5f8d71f7af130ef8ae8d3a6f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE