CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8dd9171d7cd4f35426ba7e06555f340d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8dd9171d7cd4f35426ba7e06555f340d_JaffaCakes118
Size
91KB
MD5
8dd9171d7cd4f35426ba7e06555f340d
SHA1
78dd2676cf07991ec71c23f48fbe010bcdd4f242
SHA256
ccdd28ed9fe8b68873730d525deb7eae435cd91af8a6fc8018daffa0967b9f32
SHA512
3eca4b505bf06fb27367b6ccff1aaec2ca0e1e553ecd8e106ae9a8d35bac766fbcc27fafbb661dbc336493a64d1bd10d9d17974b02519c42a216d5d8e38d32e8
SSDEEP
1536:sJVbpAYV9DPWYTCKmJsI6s/R/MF6PLZQH+IhJ7JIR1MiGSvgcdnfEy:sJ5SYVcCCKmJ76sJe6O+I/7OR1MiVYcv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8dd9171d7cd4f35426ba7e06555f340d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE