CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eada397a4a896e27af6b2b870ec8d658_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
eada397a4a896e27af6b2b870ec8d658_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
eada397a4a896e27af6b2b870ec8d658_JaffaCakes118
Size
76KB
MD5
eada397a4a896e27af6b2b870ec8d658
SHA1
bcd76818d42688051723d90f7e62816b35c1b9ea
SHA256
4afa4254143a6cf1a81a0a8cd8f8c2a0dbdf4b01987f70fb62c5ea6564d1ab8d
SHA512
6089a198ff537cde330e1740f294d7b349e7c4cbd0cce8424c0f078ca769251234f92422899fb5d5173b931cc98282cc470e25a708cb27c84516e4229e885b51
SSDEEP
768:ZT74Ati3MuLqx8M7wImKEGdIrJPBx2OxjfkH6OezvnGDDYhhnckM6+7I6hDuq:Zn4Mi33LS7enDxBjfSC+/ShcksXht
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eada397a4a896e27af6b2b870ec8d658_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE