CancelDll
LoadDll
Behavioral task
behavioral1
Sample
cf8d62383d50b3853721f8e779e74de2_JaffaCakes118.dll
Resource
win7-20240704-en
Target
cf8d62383d50b3853721f8e779e74de2_JaffaCakes118
Size
89KB
MD5
cf8d62383d50b3853721f8e779e74de2
SHA1
e8e1bf31e8ba796842b6705b408bfe1d5f2198de
SHA256
c55707c17e1e41fb54b28f9bf843408bb4b9e02ebf325ce7bd2b4be4c6097f81
SHA512
ea585f214336940f91d766b94000f6b9207a0bec8d5b4345d29bba82ead6343fc8e057d1e16ebff4b16807b079a693aa18c6eed94bb3b5de0955171b5dc86d23
SSDEEP
1536:xNWujxA5EY8DwKtOL7WsAfPrcn95OKoZGLm:u/2Y80yOOs+rc95roZGLm
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
cf8d62383d50b3853721f8e779e74de2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE