CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b8d27036b18ce9c2df8bd383ab75f1d7_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b8d27036b18ce9c2df8bd383ab75f1d7_JaffaCakes118
Size
98KB
MD5
b8d27036b18ce9c2df8bd383ab75f1d7
SHA1
71c4913068474a3ffec736228285f25e7a338017
SHA256
9b16195c8d173e8a05ffab639d3106bb4b13be19b2dcaa0985eb86dc47958fcf
SHA512
f125801d0148645e956a218f06c99821685e3b706687906a4b6c02fad2608874f4058d0285166a484c9e3d4c5d4cfb715565601df37fb4d54f011bdde846435e
SSDEEP
1536:RvePeWR6R1TWwWAuGpnNmlUy8MwxKN7Ek3JI6WC835m:RmPeK6R1TVWunNmlUyfwxK6kuvXm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8d27036b18ce9c2df8bd383ab75f1d7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE