CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8ca7adcfefd5bec5cb692b3a07665aae_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8ca7adcfefd5bec5cb692b3a07665aae_JaffaCakes118
Size
98KB
MD5
8ca7adcfefd5bec5cb692b3a07665aae
SHA1
e7c36143c01edee6a69cdafaba57de744c7afc99
SHA256
505180da4fc1d3cc83a618d7ebe654ac9634b0ee1016a08eea5cdaf5cb93c42d
SHA512
446669e93816d6978617b712ead748fdd3c32ac5daf880dfa30e5d46216f27d229196174144a8ac51b0321dd896d5110106786032dd7825f8fe4411b49be82e2
SSDEEP
1536:J3iyDPFw2bprmjqMfVuoKD7El40BIaqRmOxSJmHoG3f:1Tw2bpCxuDHy40Bn0mOUDq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ca7adcfefd5bec5cb692b3a07665aae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE