CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8e60f04a3464f553053140d8a10d8694_JaffaCakes118.dll
Resource
win7-20240704-en
Target
8e60f04a3464f553053140d8a10d8694_JaffaCakes118
Size
144KB
MD5
8e60f04a3464f553053140d8a10d8694
SHA1
366e118e49f15aa4267658204b415969a30ac1ee
SHA256
6a98491fffa1148f61877129f2a2cf18304eb42f924b8090da5b4ae5ef042c10
SHA512
7b5bf381577f99ade53aaa4c3ee404ba9f2d0da801551e4ee9b9d9840616b163c1b46d70c532bf1efb0c60acfe4786d82fb2385ba5c86f3473f61ac96ea1962d
SSDEEP
1536:MDEFUawhF/H8fOMfbmdegRHvHwx6mgLIo6dus6tVWW+tBp+5MvcFqUEm6+H:j4D/cVCdecYx6mGqdstVd+tBU5M0v
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8e60f04a3464f553053140d8a10d8694_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE