CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8ec9e46f8cb03b792921ae0e189ecae2_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8ec9e46f8cb03b792921ae0e189ecae2_JaffaCakes118
Size
80KB
MD5
8ec9e46f8cb03b792921ae0e189ecae2
SHA1
80dd766b7a02344f05596c0520eafde43b0f236c
SHA256
4dafcb27b22919508af6fd479963f4cf9cc3d6b77cd502de753899acd61fa3ae
SHA512
f13b8233badbfd3cb13335fc20852285ed534fb4bafd69078e9df57e74ef29679d2518c69cb7da0e98b2d62a0c467b0b7cdea62f93aa9cf87ecb3a06232da435
SSDEEP
1536:uRtNn1pUBR8S8XFFebsCqDVd28iqf2lF5Bcb1vrPLByxz:uRtNn1pU0S8XFFMsNd1t0AtrPLwxz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ec9e46f8cb03b792921ae0e189ecae2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE