CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8acba2953a520aa8b92528ef0e7d01c9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8acba2953a520aa8b92528ef0e7d01c9_JaffaCakes118
Size
89KB
MD5
8acba2953a520aa8b92528ef0e7d01c9
SHA1
9f54bd71631689866896fd89bf63354d3bae604e
SHA256
c98808a80616d860fa27e2a41207fc9de413f29210ad3a690ce0e2f60ad83fbf
SHA512
330a669334d3542d5f9f350b1b9d005b31694cdec203b5552ef28191b7e8398e2c36343c2139c7c93352dd8c4e391e04f65fb6b263891c38d5d870f0760afd40
SSDEEP
1536:IKdAOqsG/xxNfTMf/la+qWmO9SdJQYnCY8DKtD2Woh8BcKH+OaTpw:DAXsGtfTMf8xWmGE5CY8DKohJKeVTpw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8acba2953a520aa8b92528ef0e7d01c9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE