CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb74fb971bd929346ef4f450bd61e859_JaffaCakes118.dll
Resource
win7-20240704-en
Target
eb74fb971bd929346ef4f450bd61e859_JaffaCakes118
Size
133KB
MD5
eb74fb971bd929346ef4f450bd61e859
SHA1
815f813179c67231d7a795da958f97387795edcd
SHA256
80308b8c46a2fad2f69f2813a09fd19af5b08b5ed8fb1164ae2f3b420303e101
SHA512
88a3931b9d471abc805cec67c18a1dee6e32ba3199ad391d1a9a54210bf050fda7b007dd9557f43b03df88008bae09969be219e9937e0d7772870984a8d2f3cc
SSDEEP
1536:6Rw9k6k1FrHc5ghkEtUl/iYeZyqbtHlHALapmRrSue:/cHr8wkEqlKjyqplgLap+ev
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb74fb971bd929346ef4f450bd61e859_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE