CancelDll
LoadDll
Behavioral task
behavioral1
Sample
3c8f58024f8eb52ff7ec25b18c055f80_JaffaCakes118.dll
Resource
win7-20240708-en
Target
3c8f58024f8eb52ff7ec25b18c055f80_JaffaCakes118
Size
83KB
MD5
3c8f58024f8eb52ff7ec25b18c055f80
SHA1
ca68b87754af4ab8e75e9082127eaf6365766b13
SHA256
a959141732a7ddd33a4517adab5a16ecf49a7b64725c2d12369e192df3da9a02
SHA512
5e38ded2bd059d561c15f30391e42baabaf8eed398462c0c8c0fdb8feff860f75e80ba138d2f77537af2dc0307efa8b23faf0cd1d42fc0d10a4f99dc23b2eb7b
SSDEEP
1536:0pstl9F0gv/r7r2ZytyfYRbpuE3mOoDy4jwj4DmlV9:0OtFNv/r7r06NuE3mOoDy4j+8mF
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
3c8f58024f8eb52ff7ec25b18c055f80_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE