CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b5e891ec857df2fbbdbd1510e054aa56_JaffaCakes118.dll
Resource
win7-20240708-en
Target
b5e891ec857df2fbbdbd1510e054aa56_JaffaCakes118
Size
91KB
MD5
b5e891ec857df2fbbdbd1510e054aa56
SHA1
e222b7c8170c026c2fbada31021baf0e4ab77fa4
SHA256
5c083037766746a2bab8e5db23dc8b0ce204d35bb63be0ab4607b718dfe8afca
SHA512
d16acb93cab4c043395f180dc10fb3b34ee85b8baf23d3583e741d919195f3ce5c5337646f317e41076cd0a79732f15acdb157fea3403de3600f5ee40270d019
SSDEEP
1536:jpSyrn1CZZV1ErUuXippO7M9HKVpQXH6x2JnTDsuGQ2OHsZ96O:gyLSzErUuy6QUQXaMnTx2j6O
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b5e891ec857df2fbbdbd1510e054aa56_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE