CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8b4f478d8bddd0b435fdf0def5aa5d95_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8b4f478d8bddd0b435fdf0def5aa5d95_JaffaCakes118
Size
138KB
MD5
8b4f478d8bddd0b435fdf0def5aa5d95
SHA1
f2acd128c260758af6ff66f7a0a5375bc9f33f46
SHA256
011c8cb534e1142c4c8a2ae221f882c4198b83a8113d6ad75cf50f58abc4f03d
SHA512
3c8889ac704c18ea9d89a7c88da618097efe11b4597d4d9f68530500622fbae26042c3cb0818582b938747416f1d6c123e40cfeb610f9a2efe2ff074df1fec60
SSDEEP
1536:MDEFUawhF/H8fOWs91V/P40DctTw+jufQ+S+QPDN4DboJKy:j4D/cKFY0DctTw+jwc4D3y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b4f478d8bddd0b435fdf0def5aa5d95_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE