CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e081eb7ec9cedfd7209a3a923885182a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e081eb7ec9cedfd7209a3a923885182a_JaffaCakes118
Size
92KB
MD5
e081eb7ec9cedfd7209a3a923885182a
SHA1
a2013b5ae6a65737842abfcf6b60b568376829e9
SHA256
639f933d331e2f494b54e9af1c391b60749a089e968c516056e8525c56647c1c
SHA512
2227c89d1840e3671dcf21392eaf1c637c730987a11da68ff13d7c4135425ca3417de1b52974e8c30bd2135142cdd874a3a22c1cfb593f390a51e285f72245d7
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCZRLmcFYOeJIugP1MEBieJrSe9CcrRj/Wrxan9NUT:Ud5W8kw/jdt9YDJyCZzbmId1MFeJH9fy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e081eb7ec9cedfd7209a3a923885182a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE