CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8afcde462b8096c34732683ad7ba8797_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8afcde462b8096c34732683ad7ba8797_JaffaCakes118
Size
100KB
MD5
8afcde462b8096c34732683ad7ba8797
SHA1
63bb2de77ba5ec96e687d7c6eb07e4b530c91aa8
SHA256
0f0d148deff3d9f5f9789853e356c742e75c4bf3c3d08b669c374afbd91f7648
SHA512
4f11bec09d4b5cd0d5e6585ff560bcd8f9d657ada6455508cde0015ddb8fe60479d649c7fd68b6a76db29d1ccc64317596737e373bb15f8eb3e6ec21d96045ce
SSDEEP
1536:0pstl9F0gv/r7r2ZvdxjKwKwIS05V0RzphP+qcKTI:0OtFNv/r7r03KOH05V+V3I
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8afcde462b8096c34732683ad7ba8797_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE