CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ea8afdb93554099d1a867a2ce008a3a7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ea8afdb93554099d1a867a2ce008a3a7_JaffaCakes118
Size
82KB
MD5
ea8afdb93554099d1a867a2ce008a3a7
SHA1
c77995575663b41def01eb4439e106374e418b56
SHA256
6be135f855f1ddb4e79297ffeb11077218b35967c079d9acf75d14d02319cb21
SHA512
9d98fb1db79366a16405ea9a1e87ca8939f0b582e5c4577b6585f9269581a3a8f1474960e4e6ad77af745c7d6c10c9d4c92f37adbeecf818ef61ad5f788f09d7
SSDEEP
1536:stVbpAYV9DPWYTC7mJsIB9srH+3aezlXouP+/05aJYBnsZ/:st5SYVcCC7mJ7B9srHeJvPa/YBnsZ/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ea8afdb93554099d1a867a2ce008a3a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE