CancelDll
LoadDll
Behavioral task
behavioral1
Sample
bce8e0e4f6b929763bcf50cfd8c9f81b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
bce8e0e4f6b929763bcf50cfd8c9f81b_JaffaCakes118
Size
119KB
MD5
bce8e0e4f6b929763bcf50cfd8c9f81b
SHA1
387a3aa27c74e788fd4ba8dbbae0107bd7e93918
SHA256
d932bb41ba590c53f908396a62830da049d3192d98523b11becb89310b345169
SHA512
ac107eced12edad3497128ea4ca6ad8ff1e6a8767701810b5523db084f7f88049d36f37308799dda67f82b39c5fd0f4290423b3826bcff58044ded664f6fad78
SSDEEP
3072:TpoZP8ijIfaBfLPMOOZhZQA7uU8gL+PytGxbWNDi:TpHiuaZMLZhDuUoPytGxbCDi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
bce8e0e4f6b929763bcf50cfd8c9f81b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE