CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8794c508aaef2796c9a6708845324dbf_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8794c508aaef2796c9a6708845324dbf_JaffaCakes118
Size
118KB
MD5
8794c508aaef2796c9a6708845324dbf
SHA1
03a9dc9548824b6caf162da334021bae97d4abe1
SHA256
2a6752bee7af84ba48332e71e1d89ec43cc008f85568a666177047f3d2516cdc
SHA512
54d14cca444b585d3ce4e3c733ea17b278ef2c07fb0208a6a43113eafd13607311748b7908e65aa8b5c9095cb96207b6448e733bbfece955df793e7680038253
SSDEEP
768:MLc2rbssHT2tFrU1+Hwt3l9vzrXFPGmKEGepSachaoOui9PQtffSxoxN6+MbxXpq:MDEFUawhF/H8fOHotuoxTAXp/e8nLB3u
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8794c508aaef2796c9a6708845324dbf_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE