CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ae8bb039e2d9dbc71c42573f632856fc_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ae8bb039e2d9dbc71c42573f632856fc_JaffaCakes118
Size
89KB
MD5
ae8bb039e2d9dbc71c42573f632856fc
SHA1
fc77076c6d5f792106088c8392cdcbc7c5f33ba2
SHA256
f9acb4d2f03296cabbafdfefd1d69363e6e0d30e0b0b7a417fc707c091c25929
SHA512
3822bce7cb0cfbb406b5575f55e56a6262d528e04c9e294b81d502a6b34a129ba49842b6849de05664de84e14cb9701bf2bacb37135b78918aa3aeffc6686531
SSDEEP
1536:RosSg4ngB/6hVUTYwHsa+SIxkOqFvdi3GXXowGXUGb332Ww2Ke:1SoB/67UTYwjLIxmeGXXo0mn2h2Ke
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae8bb039e2d9dbc71c42573f632856fc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE