CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e211b30563f257e087b856ed0c9200a5_JaffaCakes118.dll
Resource
win7-20240708-en
Target
e211b30563f257e087b856ed0c9200a5_JaffaCakes118
Size
92KB
MD5
e211b30563f257e087b856ed0c9200a5
SHA1
d2649948163c3abe2875e0875764077df6954107
SHA256
ca1ae641b7475e9b683e149ab23e41e0199e5a00718618a74dee1d46c4d2d444
SHA512
b73f3567a5de264fe7295edf0f7ab85080e362818ad934025d87032655fd4a9168c3c69f76911dc882c0ab0ca75168d2105e2b1a079b695342cd1f1460064104
SSDEEP
1536:TD6K271gp7DXHQ49Ao7TWZv99GuTuoJWK1yYob0zvOEXmjT:TDGYLwwJsDatVoG8mf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e211b30563f257e087b856ed0c9200a5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE