CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8c6a5e3a285b8c7eacb2bed6f293d654_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8c6a5e3a285b8c7eacb2bed6f293d654_JaffaCakes118
Size
113KB
MD5
8c6a5e3a285b8c7eacb2bed6f293d654
SHA1
e9890dbc1cfb8eae259f2d3271fcd44219a740e3
SHA256
28781184561a4e2804c5468ce79c99f5fa7ccc1bb42a686272e4aa06660c3918
SHA512
5f8fd1488e9eeda4b349726d02a6aa3dc9a1dfe088ec17dab8324eebdf393a657699ccf162623dd470dbcc4ca16f0853bb218703d10b739df5355526f913f4c1
SSDEEP
3072:ZVOReRyH8pbef7IHRZIslXUUuB6fgarMw1sN4G:ZUIRXbewRZfNh26fgpw1sNR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8c6a5e3a285b8c7eacb2bed6f293d654_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE