CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3d6b73e6766352b6ef85e4f98e5da0d4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
3d6b73e6766352b6ef85e4f98e5da0d4_JaffaCakes118
Size
134KB
MD5
3d6b73e6766352b6ef85e4f98e5da0d4
SHA1
5e086eac4cb8c5d5626cfff45f26c022c786912f
SHA256
fc2d2fc7da2cd0bf934bedf549c35dd42368555f05907ed9d100fe60bfd20e5a
SHA512
b2998412cdbb0f81c3e65c569be86c5a055b3023c5b5a8991419cdd9cd3c3a72b0f2f398e07243c418c97a2bf2cb0d04e942f32657f41a33824cf6bf7cd21f1b
SSDEEP
1536:1cwwwHj95OW6Jri8ZLWR/Ez0auxmBBSOUKcGbMt3Bb5VOiYR9:1ZbOW6LSRY06BsOU4SoiYR9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3d6b73e6766352b6ef85e4f98e5da0d4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE