CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8a0c6ba7a453ec7f8e57bdce7f50a515_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8a0c6ba7a453ec7f8e57bdce7f50a515_JaffaCakes118
Size
83KB
MD5
8a0c6ba7a453ec7f8e57bdce7f50a515
SHA1
4a034a1e6fdf28f2aea63c1ad6aec37b994ad0e8
SHA256
183387204f1bdd2fccf091ed00f58b6725c22ba245c576bc375987ec8e074bae
SHA512
2d931e7a71b8fe39e3d87ca4ba3f59b051cfb2c4e98a30e98269df3b191800d7ba48acc08980829f38dc7ce952c08860f25c01e7b5b3e73c8487f6e8c5314499
SSDEEP
1536:ugLdYo1zz3m1/chBYovC2u20LSRV3pUjDpvkKbgOvbM:ug5YoYShu6u20eRV3mpsg9M
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a0c6ba7a453ec7f8e57bdce7f50a515_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE