CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8b7867299f58ec824d617f4b5252b5b4_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8b7867299f58ec824d617f4b5252b5b4_JaffaCakes118
Size
91KB
MD5
8b7867299f58ec824d617f4b5252b5b4
SHA1
06788ea25cfff5f984b0b35b57f9f934461a3262
SHA256
0262bf9e115f07e1069fdb702c4a2fbb9c2614f4b0266d451305dcab4556e744
SHA512
df94e9d022dbeac5fa782c6a1f2fc171a2084b39622ab94f90409cf5c875baaab66c6126453e04fd9541578d61a9b29d57bc1d39bd1594707957e75ab17418f2
SSDEEP
1536:J3iyDPFw2bprmjExd3buArbKqfx982SwXhbG+3CTEWOm:1Tw2bpCuVrRmwXFyTEu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b7867299f58ec824d617f4b5252b5b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE