CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ae8e88fbd17b37b9be28f5e6b96caf37_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ae8e88fbd17b37b9be28f5e6b96caf37_JaffaCakes118
Size
121KB
MD5
ae8e88fbd17b37b9be28f5e6b96caf37
SHA1
c4a17dce2171d318f7dc5c440f5a17fe675ec8bd
SHA256
fbbd1015c48811e5933df2e9c81a79b4e3d9a5195ba8c7d34ca986b6e0467d46
SHA512
7bccef506df4099ba078c188120e8e999603025adaa8331d74f3f5d521af82975ee0ae45d0bea4b45a64cca8cdc402d026a2835be71dfec898a5f6c5328aae98
SSDEEP
3072:hTRCFndNyCZMbFzCj5hOfv06EAFnXfzlnW5ZGh:hoRdN1qChOUeXfZnWDu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ae8e88fbd17b37b9be28f5e6b96caf37_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE