CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb158d308a888eccb5a3abdaefa11e8d_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb158d308a888eccb5a3abdaefa11e8d_JaffaCakes118
Size
103KB
MD5
eb158d308a888eccb5a3abdaefa11e8d
SHA1
23d9f639f9c7c8876faca6644d1fa05056ecc523
SHA256
d09b6fc6349d6791be2c50e9dab729e8f5343f10a0eef331b46c9caa64edbd06
SHA512
990757750bbc9d5316124717645e17c80fca074535672c9309fcc9b3c99b6af8cc6045ae203e03d2a9df089c911fe2913880cbe9befde2f420692e0c68dea70a
SSDEEP
1536:/xLK2OReR3CHPxYhLViYkosvVnEgLt9Zr7oiPOwS5LPlA9JTX93:ZVOReRyHP2JYpv5EgB9mXhCDl
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb158d308a888eccb5a3abdaefa11e8d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE