CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8515065fe87fb2e4f64bb92f5134cdfa_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8515065fe87fb2e4f64bb92f5134cdfa_JaffaCakes118
Size
95KB
MD5
8515065fe87fb2e4f64bb92f5134cdfa
SHA1
3230726fc65ac948fcfb48fa25b7971813eebb45
SHA256
0dbfaa85b787d4581ae85f7e8a53a0551f03e9bd03cf8317b8e73d9344904054
SHA512
8df8bac39239298ab05fe954f17064e439d716dfeedaea55bb047353aa5ea571db7d037e66dcefb19f2f71863ab66c51d35462a1fbc38eb3fc1c7361e917417f
SSDEEP
1536:Zn4Mi33LS7enDxBr54MuqnwBT6r/3vpsKWBvi9Ru2:Zfi3b8enD3r59uqcT6r/hsKWoRu2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8515065fe87fb2e4f64bb92f5134cdfa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE