CancelDll
LoadDll
Behavioral task
behavioral1
Sample
db8f7f431c5a818bdfa2c4de3cd3d518_JaffaCakes118.dll
Resource
win7-20240903-en
Target
db8f7f431c5a818bdfa2c4de3cd3d518_JaffaCakes118
Size
86KB
MD5
db8f7f431c5a818bdfa2c4de3cd3d518
SHA1
28540655eb346c3d0461fda966c54c6fcf933ab9
SHA256
9fafff69355253fdb8a488c3c98cf1fcc723822cc53c09573eddf609e1ea106f
SHA512
1e2bb2ac430f6968e9aae03de340fbf7329da809f813d82ecfde15c83489c9a7139fa8095ebd260761c7adff2307a00520b0b4dc9dd33a7c795236ca1f15ed5b
SSDEEP
1536:SM9jsxvhBfngRIkZ3RO46vapXMFVf5gWfrDBA7wE/uk1:3jsxvoRIkliuX2Vf5gWf3KMEn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
db8f7f431c5a818bdfa2c4de3cd3d518_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE