CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8af51d236b5bd6864fc4e2a0d7a7d975_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8af51d236b5bd6864fc4e2a0d7a7d975_JaffaCakes118
Size
101KB
MD5
8af51d236b5bd6864fc4e2a0d7a7d975
SHA1
9677a6681cf59f74357ce7d6d08cdbe4c14b15bc
SHA256
b8dd875a436ef2c979ac258ec6516b2b656b40ea585543b623088dfbb99b319e
SHA512
cd74c4422955abb61a045ba95e173b0cf08fe30cf87ed7295fc75299a007ad26889cd247d59ff57b7714b00672ebb9dde4ee1dfbb4f17facda932812d42f5383
SSDEEP
1536:DjMKODJPutB+69AmJJfa1U/B6uBtR3NwJYgPWvKLEASBXOqKoe:+MBpAm7wU/ttRvbvCee/p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8af51d236b5bd6864fc4e2a0d7a7d975_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE