CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e1e74214ba8b75db8cae859506573416_JaffaCakes118.dll
Resource
win7-20240708-en
Target
e1e74214ba8b75db8cae859506573416_JaffaCakes118
Size
135KB
MD5
e1e74214ba8b75db8cae859506573416
SHA1
296eaa4cc89f90197c74941c48c25eb15825a3f6
SHA256
e3807fcf32258271b14ab0ec8330de2a5f886d4901366827381bd66b649e5e3d
SHA512
d6ddf724b423b4f7ec8215c1106845368483657c5454afab1f24ab0553353d3012ab39ea0fb5d57fae3fe691060fa127937c84c6c1b036ca9ca9b8f4639ddabb
SSDEEP
1536:vYEFUawhF/H8MOkk54gPazqtffqGpqAd3roiwT+EzcrO0vWM3F:94D/c8ghfq0qAd0NhwD3F
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e1e74214ba8b75db8cae859506573416_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE