CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e0c2c4d7f3c97ed9e5a21ad91aac3bc9_JaffaCakes118.dll
Resource
win7-20240708-en
Target
e0c2c4d7f3c97ed9e5a21ad91aac3bc9_JaffaCakes118
Size
95KB
MD5
e0c2c4d7f3c97ed9e5a21ad91aac3bc9
SHA1
c3f1a6b39174a31f40e53f7d807b0517861ab0d7
SHA256
e4ff082a27477fee93b7cf25af77956f755a7ebfa3b9c6c8d3e23dc7051c4e85
SHA512
f8704df1067e9671ca985e7bb83655c69cd7058952d39b1e195f09c75195326741de3dd5e01c184e85aa2c2f594f57bb414aec54b95aa1e687c67bbedc98245a
SSDEEP
1536:/xLK2OReR3CHfblo+NkYKPCzqbBNG9/gTzMGgFBRLZ6hDl7sT:ZVOReRyHfO+RKazwBElSEBqhZU
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e0c2c4d7f3c97ed9e5a21ad91aac3bc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE