CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8837311ea3e4cb995b688b46f965634c_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8837311ea3e4cb995b688b46f965634c_JaffaCakes118
Size
98KB
MD5
8837311ea3e4cb995b688b46f965634c
SHA1
0884d1697fc025557bc70c2f382bf8ba1efef48c
SHA256
1cb54cc31a637a0d0d986baf3b92db40bbacc10d09e0119f11b4d7cc58a0ce2d
SHA512
97284140c3de90904760af02bfa9cad05ab5df3df1fc93d431614833db5551713f68d8c69d7358ee92b0c8fb1d700b4608c4ea09381b71b44db6a752e4aa8008
SSDEEP
3072:D4iGf4ZMR1bcPehaWzk/J4h/NavcRcWva:4f4ZMieMZJulaSva
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8837311ea3e4cb995b688b46f965634c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE