CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e1dbf63290bc637579b31a78c4eb6605_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e1dbf63290bc637579b31a78c4eb6605_JaffaCakes118
Size
83KB
MD5
e1dbf63290bc637579b31a78c4eb6605
SHA1
8e65b79db3ae3b85cba5f3339754d90e9857562f
SHA256
c5ab47aa9409b8e93a9f194d5bcd3f6f5c06826e9fa4ca6e0adfdbd1d68f86a2
SHA512
a046eb79c9ef889290e628de168c577cf4e8af241c210d5326b0e119aa63dd59d084764bb3e154cabe89be4d9c0a0e85e829278c7cd3c9fb2b2defe11d64b450
SSDEEP
1536:sJVbpAYV9DPWYTCKmJsI6bszlOtKySmU3QPxDPIEdKvkIp6:sJ5SYVcCCKmJ76wavfae+Jvkn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1dbf63290bc637579b31a78c4eb6605_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE