CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8dad3c8c9c5c9aac9b2b3f916f92c537_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8dad3c8c9c5c9aac9b2b3f916f92c537_JaffaCakes118
Size
82KB
MD5
8dad3c8c9c5c9aac9b2b3f916f92c537
SHA1
fdff114280070c7d4ddf5750d5eee660be1ad706
SHA256
df30e0ca921e8f0091e5f26d1357bae45302846171f13a57305f21025a4ca4c9
SHA512
7d68346b68475db59f85fecdbeb983cd4cdfdecdedf00755ae3130167312ebab46c246d354274c63f040670a9f377caf9be0a7d6170ac34e1fc789a083401e07
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr7nvEbzHF2CpJUVzW+CtUz:03/KeW8V3rQsKHFggtUz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8dad3c8c9c5c9aac9b2b3f916f92c537_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE