CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e24da71c8b50edd649fdd154a7dad41a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e24da71c8b50edd649fdd154a7dad41a_JaffaCakes118
Size
101KB
MD5
e24da71c8b50edd649fdd154a7dad41a
SHA1
aaf5c36d3289b5313075a6a377fcfe621cc6997a
SHA256
61cebf82c76609732cc01bf6c396c0ccc90e65bcd973e1874d0023aa25a41b8b
SHA512
8b28c3b338f09a0204893f767eb6340d30fbbc9b2d9b033a956d91d4b9ba2120826426a84d78ebf81161081db43dbcd35ee0b4d0283456ae5ac36973e710e0f1
SSDEEP
1536:uRtNn1pUBR8S8XFFebsbYd8q90AuLVIsJgAQePQPPEHB:uRtNn1pU0S8XFFMsbU+AuLVIagAsP8HB
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e24da71c8b50edd649fdd154a7dad41a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE