CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8318eba61b8d75b5c119ff163a53f2e1_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8318eba61b8d75b5c119ff163a53f2e1_JaffaCakes118
Size
2.1MB
MD5
8318eba61b8d75b5c119ff163a53f2e1
SHA1
000fba5ac029c6ca8e2b758a0359a25a202f9066
SHA256
c47048d8ff018468943b12d1787df4088563c39751c24d45f4d34f99d9f0b685
SHA512
57fc2567886a4a79fe9b092d7cd850fc20ba11fbe2139b26f68801c977031ddb5d9ce9b10145c71935b58b73eeff16973833a024826399a7ee8969f9b596ed53
SSDEEP
1536:/fLHm2owFYV0bB+MvkWfBDMa8NnGjZRNfCtpRUkB/L6xcNU:Tmhww0bB+dWfluNGjZRN6tp+K6xcC
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8318eba61b8d75b5c119ff163a53f2e1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE