CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8ac1f6bb5cdc353142420aaa07eea98f_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8ac1f6bb5cdc353142420aaa07eea98f_JaffaCakes118
Size
94KB
MD5
8ac1f6bb5cdc353142420aaa07eea98f
SHA1
572b705950e1549b22d94e3675f68ee03f26405d
SHA256
3807210e9cb05ce5126998004eb36dff3f334638cee20d48fd4b693a86e624d5
SHA512
954185d7c7259163ec67642e36cc68b1d0333013baa4f7ef95a18ee8e0cd4e3eff0b103843ee3a050790d5c338d2633c556079948a64129a88568bf65a347640
SSDEEP
1536:7rOUbmJ/ZS8DDfyUfmcE8AG3QayvDoQvJuYbBknVkZoOa9ya:FbmhoODfzfG813KvDoNDVhO8ya
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ac1f6bb5cdc353142420aaa07eea98f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE