CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8260978c7c51cd79194bc93d7a7ea92b_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8260978c7c51cd79194bc93d7a7ea92b_JaffaCakes118
Size
90KB
MD5
8260978c7c51cd79194bc93d7a7ea92b
SHA1
15dac2ca8791c39719469657cac5d07c569fef9e
SHA256
1c7c9fa8205c2c88c90758b68b079c97171de13f1f26c20a7a00d6a7296bf41a
SHA512
a20ab7047c4d3f2a3deaed02f1d21e89a058d143654679835b2d1c71cf46775713b271f4f25ab302aaf89c41a3e3168fa44344046abe9c6a5b03a04dcae71b58
SSDEEP
1536:/xLK2OReR3CH+rmUh45wuUNqJDluvqFGEfSnGcQYKT:ZVOReRyH+aU2J8MDlGqFGEf/Vz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8260978c7c51cd79194bc93d7a7ea92b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE