CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8da5c39aad5ef9291cca45e973233652_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8da5c39aad5ef9291cca45e973233652_JaffaCakes118
Size
97KB
MD5
8da5c39aad5ef9291cca45e973233652
SHA1
da51f93fc17a93f0372e1e31cb3def6bc1a8891d
SHA256
9b870a229cd33710197d0a91fac4cf63b3ed6168caf9f1b741a4a081e6af08a2
SHA512
44655ea38b1f02bba10049815d263256578efcee343867792fd229fb22a0fb20c333fb8fa7aa1582383639d29e61a96263862486c2220d66846a3142d43ac3bb
SSDEEP
1536:A3/bBBnYanemz8rFz4rKZmZIACFCgLQ4QUkZJnUSpBiULf/e0jCa:A3/bb3emz8rB7mZIA2EacUSpBfLfN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8da5c39aad5ef9291cca45e973233652_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE