CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e16639e82e889abf4b2de74ff99f51b0_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e16639e82e889abf4b2de74ff99f51b0_JaffaCakes118
Size
101KB
MD5
e16639e82e889abf4b2de74ff99f51b0
SHA1
7111abebc8c06da1eb685c7d36b2da7ae97ca318
SHA256
df73d44867fc971f7a334c71a6943bfe8b7828a29a9e8fcbe071160f10bce250
SHA512
abd76fbaa230bc15878974eb8291ae177d334cc40154d39124d1bedf3aa005e22eeaee8562549fee2ee5cb7677a698374c71da7bcd368fe77ed1efa7daca7747
SSDEEP
3072:YJOqgjs/L37JBwKz+hywKuaKUMeRbyRy/+Wp1V:YJOqLjlBwi+hBKuCMUyc2Wp1V
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e16639e82e889abf4b2de74ff99f51b0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE