CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e9c76a6a0681c8798d407c9efc0c5224_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e9c76a6a0681c8798d407c9efc0c5224_JaffaCakes118
Size
129KB
MD5
e9c76a6a0681c8798d407c9efc0c5224
SHA1
4a2b7ac75f82dd66b912eae71936a89a809eea26
SHA256
a4dd038053e29ad0d02b4a51f7a63ce399317d0c4144c75da60be90ad775f689
SHA512
143fb53a9be3ecb8c98d30d44fab35d56733f9ea99fac416cf79bee9213406990fadb2ad66a2abab04326e91df50c252553287fb43064463378ee65d369672ef
SSDEEP
1536:MDEFUawhF/H8fO97bAzprKnW+AP7DxaqJCZRP4u1z4+hjQHqOu:j4D/cyP9AHEq4jP4uNveKx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e9c76a6a0681c8798d407c9efc0c5224_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE