CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c8448f2bec5401833e4f55d49ab74f05_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c8448f2bec5401833e4f55d49ab74f05_JaffaCakes118
Size
86KB
MD5
c8448f2bec5401833e4f55d49ab74f05
SHA1
60932eea27e836dd7a320113d0dd902d0ce36a67
SHA256
6fa141dd13350cf576f4a928cf5a2eec2d35a7749dc4f478d653a2c65b8d0a83
SHA512
8bf88e6b285019c7f25ee8b48f29266cb658c156024a45d45b91d03e593a879b732623f6d0d7cbb600be22a065649a1433e49c7e58834a182bf02824bb707387
SSDEEP
1536:7rOUbmJ/ZS8DDf7uI8RV3qi0OkZ9lzd1JDwS6U84032iQ:FbmhoODfazqtHNBDwS6ULC2r
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c8448f2bec5401833e4f55d49ab74f05_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE