AXE8_ExpatGetVersion
AXE8_ExpatInit
AXE8_ExpatTerminate
Behavioral task
behavioral1
Sample
683117af039f86fda40114431d80f587_JaffaCakes118.dll
Resource
win7-20240704-en
Target
683117af039f86fda40114431d80f587_JaffaCakes118
Size
181KB
MD5
683117af039f86fda40114431d80f587
SHA1
912bff9a7f2ea0b93b3c09d97a16f9b8ad5295d1
SHA256
9084ed91a6aa3c5e72ab63f8e744b1c62b51a5ea580d8364d3404c5be11a3835
SHA512
913de5b48053a745a963a95a740609f2170d1a91d382fc4d18c5b22cca25a223eb35bb11457e91eb47ecaafc565fda78c4e87f59fc03d15ab290a118ae3f1bc3
SSDEEP
3072:8yxbmXUwBNSeuQ1rPf5GL35outbuNjeS/UMEEFP36u3VE+gWxs0ewMMxYJ4o8pA:r+nNSbQl35GL5oSSZUUFPqYVbs9wrloN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
683117af039f86fda40114431d80f587_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
AXE8_ExpatGetVersion
AXE8_ExpatInit
AXE8_ExpatTerminate
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE