CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8ba4f793fe1e491659429f72df405749_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8ba4f793fe1e491659429f72df405749_JaffaCakes118
Size
91KB
MD5
8ba4f793fe1e491659429f72df405749
SHA1
40cf5c9c5060c816ececd0eae18b0ffae55bfe0d
SHA256
d7352e09430d42c1b89aa1b3074c3715805e64f42bf6fdc885448a86ae04de54
SHA512
1ba18ffe46bf1dedb71a19c848a7827ae700c0609b51b8e9572fbd8552cf5fb766a2dc20a6b518739422e6276a378f4e69a9171dc10e347dc4d9d4227444a52c
SSDEEP
1536:YJpsqgQUNFs/L3BBJNR8SvkyKsS1Hcb9fDQciXHoiMTPP2Iec:YJOqgjs/L37JNRdkbsBb9tkoiMTPPfD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ba4f793fe1e491659429f72df405749_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE