CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb2f145504d1ce4aa0575fb569a37d3a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb2f145504d1ce4aa0575fb569a37d3a_JaffaCakes118
Size
88KB
MD5
eb2f145504d1ce4aa0575fb569a37d3a
SHA1
8000a6b33280164dcdd1c331978b28d3f204f54f
SHA256
0139b396a7613cd17ece77a89f1afe1ce07ac589765986996237a6d8d7e36c45
SHA512
7b1e9ea88dadc3023e82b3ac12e884e32aed1735bb69aa48f13ab0872459b21f75f9da14c08c7e9818f03691ad82729ebf5db5fff0bc11bced768b2106197843
SSDEEP
1536:6MG5swHfatiJPRuHWqP3I1l3U4O+RXFk2oIhUm7iKxa7V+:XEHfOiJpmWeKk4O+1Fk2ohmOL7M
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb2f145504d1ce4aa0575fb569a37d3a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE