CancelDll
LoadDll
Behavioral task
behavioral1
Sample
8eecd4610cb5d98da9ed3b739f3f8011_JaffaCakes118.dll
Resource
win7-20240705-en
Target
8eecd4610cb5d98da9ed3b739f3f8011_JaffaCakes118
Size
94KB
MD5
8eecd4610cb5d98da9ed3b739f3f8011
SHA1
74df2e50735ef636857a7a902756c3c278d7cb16
SHA256
9b33315fadb065612385d2ff891cdb35582f579d55e6a2ac473c5b582e6e0b7c
SHA512
7d4458bac32eb30e790b192980f10c2c13b05f1e720919cb9a3602708ed3a5c8449dd8092e8834c89325e081e1626bd93a9aac7a3b7012e99a7ba1b2c012acd0
SSDEEP
1536:AnSIWWZU3mEofRXvQU1ZnIQSoDZqUYxUcm3:ZF3mEkRXYsIiZqUy3m3
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8eecd4610cb5d98da9ed3b739f3f8011_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE