CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8a77fb8064de96470d1278c82d7a4470_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8a77fb8064de96470d1278c82d7a4470_JaffaCakes118
Size
107KB
MD5
8a77fb8064de96470d1278c82d7a4470
SHA1
c9ef2caff6e83835a6b579cf7dee3df1b5a997d5
SHA256
e750ba895f477e2a5ac07552a3036c0a0ab4fe9778e9c486a4d3bad4e5d4338e
SHA512
b5a5633d47573d99177760782f4f0efcef5556c2df42d460d410f784ce107a0313c6dbb11c1aad0a16692624d9ded881c60c01ae5aa9c00c4be9ec0f511a6771
SSDEEP
3072:FfUxhDtZp8vIdCFu458gdMhln9X1ccR/rA50:FfghRT0IdC8/Phl9XGcdf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8a77fb8064de96470d1278c82d7a4470_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE