CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8b11603230865cdcbb89acf97c5ddf1b_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8b11603230865cdcbb89acf97c5ddf1b_JaffaCakes118
Size
89KB
MD5
8b11603230865cdcbb89acf97c5ddf1b
SHA1
d94591c0b95ec22e28343bc8b3f285a263670dcd
SHA256
cfecaeb08121f4d21b74e0e20cd14ea572e6f1572a4c7fcfb52b6a35e285488e
SHA512
f653825d80b37bfac622e8585bd85e9ed7db04a4dea001e45c6a6c016bcfbbe4dbc915d92a60194eb22ebc1d1c4e3c012ba29cec3d1a5fb73962b0d2a0749c55
SSDEEP
1536:SQclh8MIwu5+oYC3QPJc3K/EyWC03eQLbPoO:ahdIw/oYhhcoWXSO
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b11603230865cdcbb89acf97c5ddf1b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE