CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ea297ae490800ab6564ad963f1279af0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
ea297ae490800ab6564ad963f1279af0_JaffaCakes118
Size
99KB
MD5
ea297ae490800ab6564ad963f1279af0
SHA1
4a49b54258a898755f1f01c2e39c86aeb31993ab
SHA256
cc72fc8aac8861bb0bfaf46a94f13627a4357b08dede9066f0938d5379b361e5
SHA512
1fa9141c2d3d9dfe7a66e81e2ccb94f780627ccb090840d0c2b2dd53fd05a34d4af531d64495c532d9dcf4527d5ccb96dfd305bee63aa02245248c0739cfd074
SSDEEP
3072:maSMBhVNgHLT4RzRZ0pS5Lu89nKevr86/:maSa3qMR30UpldKKx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea297ae490800ab6564ad963f1279af0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE