CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0e0bc331568ce913063f3565f076b39c_JaffaCakes118.dll
Resource
win7-20240708-en
Target
0e0bc331568ce913063f3565f076b39c_JaffaCakes118
Size
141KB
MD5
0e0bc331568ce913063f3565f076b39c
SHA1
9b4894de5b34e19ca288e8529cec50fc82098e46
SHA256
a0612edab1bfbbbfe0917f90acc6036e499dcf746d55ddca94f9a1eb72631765
SHA512
7d63be939415dc84415a9ee099e6196e9321e1cb5ecc966604759ac2c111dfd139e3ea9d37a1bc3d47357bc56d5225ecc0bb4c9cbfc268088bcb3f9cc1c92638
SSDEEP
1536:1cwwwHj95OW6JriX/9j1AFwtQapadExEYbX3P+nkYaoOJkgEoBf:1ZbOW6G1j1AWtvpadqEknPGkYaZCe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0e0bc331568ce913063f3565f076b39c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE