CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e082905f19b562736cf31afd948839c6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e082905f19b562736cf31afd948839c6_JaffaCakes118
Size
90KB
MD5
e082905f19b562736cf31afd948839c6
SHA1
af24bbf368b34e0d2c4e48d74ce2dfb15f36f627
SHA256
c2a7f7d19755c7dea6e0fd64a7c254cb79259212047ea047772bb09d8a38a7de
SHA512
154e9a8d6b1feb3b2a75aff5188542c3a42fabff200bf3931ad45cc1b0f3a777263fa6e7c883c54860122d8afeb6751da4eecd39ad88be4b806021e40d08b4ad
SSDEEP
1536:J3iyDPFw2bprmj+oTvc1t7CHT1D9PVxjrs0ZndOOc:1Tw2bpCbTvC74D91Zn8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e082905f19b562736cf31afd948839c6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE