CancelDll
LoadDll
Behavioral task
behavioral1
Sample
84894adea7f9da48bb845be36fa1f810_JaffaCakes118.dll
Resource
win7-20240705-en
Target
84894adea7f9da48bb845be36fa1f810_JaffaCakes118
Size
90KB
MD5
84894adea7f9da48bb845be36fa1f810
SHA1
3e5112f0ee3fea1a08f5102160ad3c32957c4e47
SHA256
5f748641ba422d545d1de096bbca6c45c1ba9e4014fd22cfa5b0522994604b45
SHA512
db8705023a037e987ea096eb28f86131152c7515b8a5fcbd8d616d4f21d267ee4540ee2f83953e239e363ed2501bfb3a79ae904b1b111f8e4536b19250ef2ad2
SSDEEP
1536:0RBNXdVNoK87xbs5dlFwojyFD+3p1nwjybvtr87KJC3vEt:0RBNXdAK87xbMdlFEZUp1nQy7yGCf6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
84894adea7f9da48bb845be36fa1f810_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE