CancelDll
LoadDll
Behavioral task
behavioral1
Sample
e06fd5b55d88fef5dfc1408e8199a44b_JaffaCakes118.dll
Resource
win7-20240903-en
Target
e06fd5b55d88fef5dfc1408e8199a44b_JaffaCakes118
Size
86KB
MD5
e06fd5b55d88fef5dfc1408e8199a44b
SHA1
a17ba3bb2aac6321dc26806ec089914dbdf92b3e
SHA256
f630b66f9096a072585ad0aeaa10f0ba0c4d735c931e0d0208d23cc82dc04f91
SHA512
1193fdb54d1012c51baf684590a9616f3fc12ddc728d0c1452e89484b5bb8ba001dc282b2f8618cd776256a415906ae34e755de94cfe56738a95e6298ddb8a8a
SSDEEP
1536:SAVJ0mWeB/iU9VInSuMis3tpIr/6HmiI3Z+GKK6qWl7CnYfQ:zJ0mW8/ivkis3tCL6GP3Z+VK6qWIYI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
e06fd5b55d88fef5dfc1408e8199a44b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE