CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e15768344a74b9bac7e6477800d2c479_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e15768344a74b9bac7e6477800d2c479_JaffaCakes118
Size
108KB
MD5
e15768344a74b9bac7e6477800d2c479
SHA1
9782ff1472a6b6c691b33a0de0059dd2e8f0aa68
SHA256
61d09b959cdc37b0affa5f02ed6461dab257ee3f60ff6ff99f14574dad3c7633
SHA512
9fe19f780d1379932b2b8962b106a66e80dd0df0708d6dc498d6ec19afee1540043b12eff94fa62128cd2e49b16ab5e14d59ed09748962bf0df1847f03f6810a
SSDEEP
1536:TD6K271gp7DXHQ49AKiKjOsl9ywywZ34ml3l6m4BL5k4kfsgpySFen/p:TDGYLwwLjOsl9JynE3AX0swySFmx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e15768344a74b9bac7e6477800d2c479_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE