CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb6e6bf7498651a75a5afc05b2307596_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb6e6bf7498651a75a5afc05b2307596_JaffaCakes118
Size
131KB
MD5
eb6e6bf7498651a75a5afc05b2307596
SHA1
6960fce7f5172ce55b8f2cc8a28ddaef7e620126
SHA256
3cc19dccf3c7a190cde58fe6302f1c99327ba1bc57c7fbd6a797580c82f01a1e
SHA512
c2e2f43c5fc5cf07257f805e6e645c1ffa76c0632fa76a0c1d14f3c0fbb226393b76e93c7da2bfd1917e2b70005a65d584cedf4c6a5cb0cb1b822515736f6714
SSDEEP
1536:MDEFUawhF/H8fOhkMxO9ec/QbXk/At5W8eyQZAwBuyxh:j4D/cG+AGHBTxh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb6e6bf7498651a75a5afc05b2307596_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE