CancelDll
LoadDll
Behavioral task
behavioral1
Sample
83888ee9d48d716d0e070e9c11b6b4e8_JaffaCakes118.dll
Resource
win7-20240708-en
Target
83888ee9d48d716d0e070e9c11b6b4e8_JaffaCakes118
Size
98KB
MD5
83888ee9d48d716d0e070e9c11b6b4e8
SHA1
6f61a758e9ab3022ec2437a456cf0322ea7a8f4f
SHA256
fbe343c91a4652092a105d98378f7524f8be7786709cc9bf7f0c7b797b9e123b
SHA512
f98f5796cdd874d1dfcbd747062a8322ddada99511d3a507ef779a2f758a18f69018f519fe6490b9c94229edd59820b5eeede104d252070d1673117c0971030f
SSDEEP
1536:qWNTI2j7IGPmy5guIRprX18G/fHiMCHgDzVlGJWRtHKRiq:qWNTHTey5HChX//fHiMCHgDBsgRtHKAq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
83888ee9d48d716d0e070e9c11b6b4e8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE