CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e9f9c1ce177633e5d3c1e0c4b53e5443_JaffaCakes118.dll
Resource
win7-20240729-en
Target
e9f9c1ce177633e5d3c1e0c4b53e5443_JaffaCakes118
Size
110KB
MD5
e9f9c1ce177633e5d3c1e0c4b53e5443
SHA1
54faa62499dc24940925a2342ecb8c4342929aee
SHA256
8d20117fddcff1380bb788d2f3a2006b340d45dabfb90a244035583cb5bdf720
SHA512
5f698f2dba51c28d46baf9ba1a054ccbdde63e5df6ad5bc8050e1a15487d288e1e38743bf71da7a72dd7644b647e13b750966beb1b5540bf061e622097ad2bd0
SSDEEP
1536:TD6K271gp7DXHQ49A66iO0hMVrJaO+Hn/35/vfXVBt9iYqnm+6MD9Kg:TDGYLwwx6inuVrQrn/JXfQnm6B
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e9f9c1ce177633e5d3c1e0c4b53e5443_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE