CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b8ba7386cdda5c6cc7599ec96e10a468_JaffaCakes118.dll
Resource
win7-20240705-en
Target
b8ba7386cdda5c6cc7599ec96e10a468_JaffaCakes118
Size
107KB
MD5
b8ba7386cdda5c6cc7599ec96e10a468
SHA1
951e6ece4f2938baf9d02f5a5f1f428bdbecc198
SHA256
59681e0dd89142679a719bc3d2eb45c84ae905a3b75569eafcc872f8a1d27eed
SHA512
71268f3efd9f7713b0da3f53108cc14d89e826ff838233425a0df1f694ce49e6ec99d53a9854ec9b706299b538f666781aa6375bf7aab6b54b62a6098686b506
SSDEEP
3072:FbmhoODf3fO4v10Ws3xBRfI2/CRNJpNbh9kEX:Fybzfv9JmRwaCRbpv9X
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8ba7386cdda5c6cc7599ec96e10a468_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE