CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8df46cef9f85a1cae6a42d4a22361e7f_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8df46cef9f85a1cae6a42d4a22361e7f_JaffaCakes118
Size
112KB
MD5
8df46cef9f85a1cae6a42d4a22361e7f
SHA1
6ddfe0de9602750ccfeb3e10edcde635dd664463
SHA256
8e4a32739da93f1cea64c5782768d4e04a877500cf6347cb232ca5965127b765
SHA512
2b55936fa712ecdaaefcd6bfe6bd31816dd8b99476e7688728505b94198556c4a7ab52d22459125f9fb3ff6e1820cf9c02183d5ae265e303c528d72e6e89136b
SSDEEP
3072:YJOqgjs/L37JSiIeo6wNq82m6C8lS+iVxDcqO0iqa:YJOqLjlShr9P2mrglrqa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8df46cef9f85a1cae6a42d4a22361e7f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE