CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8ef9546464690c453d8f811d2c48b3d1_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8ef9546464690c453d8f811d2c48b3d1_JaffaCakes118
Size
97KB
MD5
8ef9546464690c453d8f811d2c48b3d1
SHA1
0c22804c285d3623c0afa3dfd75f51e169c51d1a
SHA256
9019f6b4c93d624fab6ad4cc2661c1221502fa2aed58942173674e0daabcb78b
SHA512
517a9b13f508081671388538e64252d0aeec9cf02aba130221d576db7b5ecdec2dcd54510bd93c0999bbf14e7e65c3d941675bbbdc4698cf243e1c526d0a187f
SSDEEP
1536:AnSIWWZU3mEoTNuOZZVbzTR8yq56xTreLynBv2cOD7HoZ3:ZF3mE1OZrzTCf54WLynEcOD7HoZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8ef9546464690c453d8f811d2c48b3d1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE