CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e0d75f570556ca71dffbecce9116aed6_JaffaCakes118.dll
Resource
win7-20240708-en
Target
e0d75f570556ca71dffbecce9116aed6_JaffaCakes118
Size
79KB
MD5
e0d75f570556ca71dffbecce9116aed6
SHA1
65f521e6f0471d726cd8611d4e4d9ebce822bcbc
SHA256
004115a91002c34dec7a653c985af6c605d6e803d5f00756c0ddeb76c86eb563
SHA512
5dd384e4b1c3f43a0b530bb9b7e1a9b5954899af3fb822ac727b41002e3bfb65e7fee15f9e1c80eabb4864f6d6ebf7a6f11dff753825f533c7cb78b54e72c205
SSDEEP
1536:YJpsqgQUNFs/L3BBJN65HfA/T9xHhqWfbMeI2XA3EPOcLk9:YJOqgjs/L37J8J+BxHs+MeBX4WPLk9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e0d75f570556ca71dffbecce9116aed6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE