CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e022498e5db5d37cba9c0ad8bb440107_JaffaCakes118.dll
Resource
win7-20240729-en
Target
e022498e5db5d37cba9c0ad8bb440107_JaffaCakes118
Size
99KB
MD5
e022498e5db5d37cba9c0ad8bb440107
SHA1
ff94152a5a98803e11796191c0902ea7b24a0a78
SHA256
f2952f7c514fbce90b691302d5bb309860441a61cd6e4c81a5f4a376ae12ca1a
SHA512
004c90dc383e9b5f1aa4210cc31f23de2815786735a2bd6e15e7bb806803acd150c2aa1db19cdd44a7d685aaff92f6b12425f7c15bec90fd780eecdffa7cd0df
SSDEEP
1536:aNpvCiq+dw/mtwsXcy6ceffxa2XDXOZBpTRtvoT+iA4Fo:aqrcwsXcNceffxa2DXOXpPeo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e022498e5db5d37cba9c0ad8bb440107_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE