CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8b59f7465f93b7082911188fc1f2ff62_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8b59f7465f93b7082911188fc1f2ff62_JaffaCakes118
Size
108KB
MD5
8b59f7465f93b7082911188fc1f2ff62
SHA1
6e5818e54251d4f0b2e87a05612852d4bbb53f2d
SHA256
aef366516c66c12d36f1fb1733b03f50db79c13da0f71141c984cdbd2084ab7d
SHA512
986f4bd8ff89b5ba272a6f71320d90a6e736617a7ebfcde7d6c81e80f3235ace8010304ed15cf5556c08783161cf1735111290621d0f6d416d35a5e9cd4123a0
SSDEEP
1536:qWNTI2j7IGPmy5guIRpvbhXHfEkft5n44mGx/lkdHUSb6YExnm:qWNTHTey5HC3vEkDn44Tto0Sb6vJm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8b59f7465f93b7082911188fc1f2ff62_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE