CancelDll
LoadDll
Behavioral task
behavioral1
Sample
88e6a7f0ae5ee6ca435de6c02b4ac822_JaffaCakes118.dll
Resource
win7-20240705-en
Target
88e6a7f0ae5ee6ca435de6c02b4ac822_JaffaCakes118
Size
88KB
MD5
88e6a7f0ae5ee6ca435de6c02b4ac822
SHA1
efec20778ad73232413a98941fb7a0be79e2e267
SHA256
9fb706ece50549427c1e6e29aca05b5e283955ba86f0b2db338aeef1d09bcfbd
SHA512
6c64ed82f8a371ace1c64b8133b4b1e64f79cbfe662f0e364be628bab7d6489d39bc3e632d7e3f60e64fe39f21e797aa6abb0aec69d6afbf3f83b9fc7bc3e2e1
SSDEEP
1536:INWujxA5EY8fwKVlK1buYLiAnub6orecwlNVU:x/2Y84ClKluYG/b6smDU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
88e6a7f0ae5ee6ca435de6c02b4ac822_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE