CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ea83e720567a4c97fc1276ea11bd8928_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ea83e720567a4c97fc1276ea11bd8928_JaffaCakes118
Size
98KB
MD5
ea83e720567a4c97fc1276ea11bd8928
SHA1
42b0ffae0f58d1be178e0be0740c84649b1598dd
SHA256
ce51137d2f539f66ff168f5ce4f439b66e6195d67fd69b6e6a0d4fedc933fdfb
SHA512
c20496fe9ddd902cc41202874273e048908b85f90e340a91fa5cc2681dbaf3bf0f6756765b12e21f1a2c6c50fcf789195584485d3ec95db0833dc4a602fb402b
SSDEEP
1536:SQclh8MIwu5+oYjyTRRWBN3Y+gOZbHGD8MdLrx84xlY93st:ahdIw/oYjuRRW1gYKD8Kp8v+t
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea83e720567a4c97fc1276ea11bd8928_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE