CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ce62901483754cf86dc1cbe55dd66271_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ce62901483754cf86dc1cbe55dd66271_JaffaCakes118
Size
93KB
MD5
ce62901483754cf86dc1cbe55dd66271
SHA1
33259b0458362188ffae307b4584f2217e8bc189
SHA256
ab7cc5240348f1819248ee5f56d18fb0524dc2baebb723ab3537495d8cc10ccc
SHA512
ef9b4d2a618d404dd48381c7a052b7d6d95305caaf4564a082a79e76596902b61994773cc7dacc1980101d4e64172bfbbea2dd417ebd8f551b0fb325c45838d5
SSDEEP
1536:zTNy9IRGQLGrFQhKo5ldTwmRm3PULSctZ0j/ftcIlIFUaa9ppN7KFJH:z5rLGrFQkAldTwmRcPULScEjtcIWFmDG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ce62901483754cf86dc1cbe55dd66271_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE