CancelDll
LoadDll
Behavioral task
behavioral1
Sample
93b8dae16ed452a294cb695e2b5f56b9_JaffaCakes118.dll
Resource
win7-20240704-en
Target
93b8dae16ed452a294cb695e2b5f56b9_JaffaCakes118
Size
86KB
MD5
93b8dae16ed452a294cb695e2b5f56b9
SHA1
c019ecaeedd1a728fae1a49d15ccb6b31198b523
SHA256
404cc326376fefe6ab24de2e87fe1365536cc5cd5444cab81fe324338937d7a8
SHA512
717abecc59bf375c1f2006e00b51da97212c29631ea638d5dbefe9ec7b2b3703fee5ed17478e1d272a55ac5bc0108c17608b0d44530a40837a7679480686023d
SSDEEP
1536:Cx3/K2rb4l/8V3rQIr7xiys1Bcjj1k1VbeZ2M+fkIl5D5:03/KeW8V3rQsxZq+1oewM+fv5D5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
93b8dae16ed452a294cb695e2b5f56b9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE