CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8a2d86dcc28d35b70b8dc3d2b655f420_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8a2d86dcc28d35b70b8dc3d2b655f420_JaffaCakes118
Size
94KB
MD5
8a2d86dcc28d35b70b8dc3d2b655f420
SHA1
00822c2aa5fbfc5b60588ae5e639fa9241a8f177
SHA256
cd1d1bf2144e72c983ec4a1ed7251d121f70e5542586aa13815127dd0b077383
SHA512
ee520df4600cf6d8b37ca8c5e6c3d414a54e1fa2f1b65112595928945e79b125e49492b4e7956646b600993ab63544610ee60030e6936d8307f711e537cf5713
SSDEEP
1536:SQclh8MIwu5+oYQIBx7ZOUExFFOhSuQaSw/QzTCYriqp:ahdIw/oYQWZvNzpf/QzOI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a2d86dcc28d35b70b8dc3d2b655f420_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE