CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e23a8fac7ab46b7f35151c2af4cbee94_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e23a8fac7ab46b7f35151c2af4cbee94_JaffaCakes118
Size
92KB
MD5
e23a8fac7ab46b7f35151c2af4cbee94
SHA1
4a63549916b1f55f343ae8df91b0104b28890626
SHA256
305a83a0063986975f91277781b8105a70e18a26508c7f871d1a2e14693778d0
SHA512
f481865f54bcddb937eda40a6b3bc836d3b1c0a21b74107e5bd61180582e3858b32d1a37cf5755b0d806f7fec5a7c12598340ac3c6e00fe5e8fd56bb76731f51
SSDEEP
1536:INWujxA5EY8fwKV5kPgokzHa54tTSEJ/7lSPDug6WB:x/2Y84CwhkzHa4tTv/pbgN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e23a8fac7ab46b7f35151c2af4cbee94_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE