CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8eb6f6050161483ea6744bfe827389b4_JaffaCakes118.dll
Resource
win7-20240708-en
Target
8eb6f6050161483ea6744bfe827389b4_JaffaCakes118
Size
104KB
MD5
8eb6f6050161483ea6744bfe827389b4
SHA1
63cb202912cf24a75c90b16c4a22403a505acac0
SHA256
dd3481e8bb9dfa5e288835a9877dd4493d89198ab244ba52842d55b5beda5d61
SHA512
333060b2b0c6073a7587aa76daa70bbf2174641b66ed00dcdf5c3f536fb131dc98167d6f7e4d9fe6c2f57c6cb6f20e8b8502bdf40fb0fbe21ad76637804861ea
SSDEEP
1536:TD6K271gp7DXHQ49AMLwdb7PW9lyRRYCoXftH7ttMbLft3pJq3iXvr0QuuJabI:TDGYLwwTh9gPDmftHpGV5Aw0QTAI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8eb6f6050161483ea6744bfe827389b4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE