CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb37bcfa49d46a5f0df9fccc19f56cc4_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb37bcfa49d46a5f0df9fccc19f56cc4_JaffaCakes118
Size
6.4MB
MD5
eb37bcfa49d46a5f0df9fccc19f56cc4
SHA1
e33f3c06b9afb4ef4747aeab5ccbcad0a8d5893d
SHA256
fb9befed68ed67e1c2ac403e8049690f101d5543cae785494b5ecb662cadff62
SHA512
b51dda6ec040b652f889c95446de8c375b01708b9bc66d6a32d1bf331384cf5cb9849d76ae7537ad68c3bc95a520fc7dd6ec2322f1e71f80b023bf5a09e5aee3
SSDEEP
1536:+wRmhQ/5xJ04CK2buhMPlsYA309AcsXLNrkPUNrNr9SKi:+wRhw4CK2OMPLj+XL5kPA9SKi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb37bcfa49d46a5f0df9fccc19f56cc4_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE