CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8e8a26f76ed2a3c39448245ca68b075d_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8e8a26f76ed2a3c39448245ca68b075d_JaffaCakes118
Size
93KB
MD5
8e8a26f76ed2a3c39448245ca68b075d
SHA1
50fc3170348ba7671dcb908eaae7a22b520ac59d
SHA256
531fc57ede31772e32e2f086203a9f6c60a33a0b48522999829c64c5041e3054
SHA512
aef8538afc1c9e6fdcc321587c72f8c7dc802be1a847540f4bbd31975b7cc4197a244cea9c81f9247bcf2b9dfa609f1c36760037c099e7ddc18da55b59e768b4
SSDEEP
1536:/xLK2OReR3CHh5txDbNo/lk8RiYgVDpzitHRJs6:ZVOReRyHTtxDFZVBiu6
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8e8a26f76ed2a3c39448245ca68b075d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE