CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b8e2e205e0892fb9839e6e9b48bbe40a_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b8e2e205e0892fb9839e6e9b48bbe40a_JaffaCakes118
Size
93KB
MD5
b8e2e205e0892fb9839e6e9b48bbe40a
SHA1
287b5e699a64d1a800dc944df89e596839fa2be7
SHA256
b2b53a9c38b31a26c1fbda1c2c7118057be9cf204fbe5d95fcf71b185a39cf4d
SHA512
8ebdf35d753e26263c6337eb4175d303081613a5a5076b443277d815d1fbc2523e3e651eb6b83e56117adb0988888d8433f5f05bf84346d7279f05f3d2e71af2
SSDEEP
1536:SM9jsxvhBfnYGqJv79TluvHzKOVxOiVP+nt6Kr1aByf/2TAqWgtA949Tu:3jsxvBqJhTAfnLO4Wntbr1aoAjht59C
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b8e2e205e0892fb9839e6e9b48bbe40a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE