CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b8b11ded816d333a66f01e30edc0485b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b8b11ded816d333a66f01e30edc0485b_JaffaCakes118
Size
99KB
MD5
b8b11ded816d333a66f01e30edc0485b
SHA1
7484a828936596b4d514ae21575d2b1987f8cbc3
SHA256
5b8fe2de01b439ae51e25bcf13e784ec20c8ac9b6be0256f7696e50cd36e77ae
SHA512
f7adb938bd0a2dd781719e6281708124f6d16d9ab9e047581731d9df7a56b2719137a1f29d06f395231dddcb307b5e425f8fcfefe49117638a331e6f865e3f3b
SSDEEP
1536:7rOUbmJ/ZS8DDf1zRJFrjf/0DMgabSaJo7cGeswfKzGhKfE:FbmhoODfvjfsCbjJo7cmksE
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8b11ded816d333a66f01e30edc0485b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE