CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e1b162826fd4ef4e65fb5cf25cd13390_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e1b162826fd4ef4e65fb5cf25cd13390_JaffaCakes118
Size
110KB
MD5
e1b162826fd4ef4e65fb5cf25cd13390
SHA1
303216c21aa33c960c2d498ad4947bfbee3c6cab
SHA256
83a6789d0cfb5dba244e17816b72c0e4c59ca6a17748b1a118eaff66d8e202e5
SHA512
328f20a27bc99e28036bb519e0891c0e724cd83909dded4c237b21ac4a94889d19bc0dacf79cb9d41c196b086a499df5579141ea699b782823e7b9bbb104722f
SSDEEP
3072:Ud5W8kw/jdt9YDJyC1SKY7zKettAG8w3qHwpM:Ud59bdt9sx8KY7z9tkF1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1b162826fd4ef4e65fb5cf25cd13390_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE