CancelDll
LoadDll
Behavioral task
behavioral1
Sample
c8cf676e2bd57b697222c49fe5c616dc_JaffaCakes118.dll
Resource
win7-20240705-en
Target
c8cf676e2bd57b697222c49fe5c616dc_JaffaCakes118
Size
105KB
MD5
c8cf676e2bd57b697222c49fe5c616dc
SHA1
8d40b921b1575320bd1dd4e4d3ebdfe69fcede65
SHA256
de69d3227df3750725728f8b9e00d3d0e512337653d9f5939d876ec70563a7f2
SHA512
c632a8d980f10411b7dba1b499db31f471e7408e01d00e190f215bbfc031c331cd51c9c237144a63d63d1e3485d83f42e046a65cc38583004c4694c0e0b84da3
SSDEEP
1536:Zr4dVzqJdgJhjJKSYu/xSgw42opG5b0bIgUqaqsALnNN6/1GnCjv:ZEdVzq4/j5k5AbIfMJNN6/YnCjv
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c8cf676e2bd57b697222c49fe5c616dc_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE