CancelDll
LoadDll
Behavioral task
behavioral1
Sample
b0eef37429eac0a02fb8cc5696b9b8ff_JaffaCakes118.dll
Resource
win7-20240704-en
Target
b0eef37429eac0a02fb8cc5696b9b8ff_JaffaCakes118
Size
93KB
MD5
b0eef37429eac0a02fb8cc5696b9b8ff
SHA1
03cbee9e6cfec07f31288a32dd8ca4acf5346457
SHA256
214a201d92a728be78b87ca2c9d3518f1c46b784d6f8f959f301b5468f8500a7
SHA512
1076286cc82d29bc338dc62e8122ca599056fc37f6b1507e424971f714e8d4889141259b245664ec04a1b5821fc56c9921050e78c85e083e91535ff6e7f7a513
SSDEEP
1536:0pstl9F0gv/r7r2Z/Dad31g3Mwxr+ithcDWRBwhLu2Z/GzviGx4fdbk:0OtFNv/r7r0/DQ1g8WKq6WnCS2Z6v9Wy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
b0eef37429eac0a02fb8cc5696b9b8ff_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE