CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8c1242a92855d385b9398715ae27199e_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8c1242a92855d385b9398715ae27199e_JaffaCakes118
Size
94KB
MD5
8c1242a92855d385b9398715ae27199e
SHA1
616a8dd641fe71334b0c9ec756ac7f8098f6a434
SHA256
f3825bee4ada669f3236d80135e5d28dbe964a040c970c379bc17bd9668ad0c1
SHA512
e23893c600f4c0c090706ec123936938b70507f9b0279e31b036b9de5e73bb6a007056a0638fb53fd4d0a10e7b96e6ee8720cbc736ae95c3068cbb1c23f9b2fd
SSDEEP
1536:Zr4dVzqJdgJhjJKSYk3Fx9dj2SRS2zqujSurj7KIJNaDNf5PY:ZEdVzq4/j5jBfRSjKj7bJNap9Y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c1242a92855d385b9398715ae27199e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE