CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8b228f464554d29860472a3c4557776d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8b228f464554d29860472a3c4557776d_JaffaCakes118
Size
92KB
MD5
8b228f464554d29860472a3c4557776d
SHA1
316c20607ccebef0595cc11cee3641850f936025
SHA256
e46dd22495f29674a8ced278cb364afca8b5bb36b50c36b4ae0081fb96a70034
SHA512
bc546eef463bca087ca6593f529e09dd99e4671a204b55b90e63688f3a2e63f3eabd1e2eecebc1f472fe617d7b1f0bef83923edd390a1fe5884f49d8c403ea47
SSDEEP
1536:qWNTI2j7IGPmy5guIRp4RuvQQG6qHgxdPeuzH3kDJjDy7l1Zjt:qWNTHTey5HCOuPZdWuzH3IxD6tt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b228f464554d29860472a3c4557776d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE