CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb7106f798bc469d792a4a2fde5d9ce0_JaffaCakes118.dll
Resource
win7-20240708-en
Target
eb7106f798bc469d792a4a2fde5d9ce0_JaffaCakes118
Size
6.4MB
MD5
eb7106f798bc469d792a4a2fde5d9ce0
SHA1
7af0d687c0333a03fa9b2e920a682c4d6476019a
SHA256
0192b993b4801cd1eb440c06804a825b346271d5bf0ff9ed02c5acf5f02a16d9
SHA512
ab5356167173cb057934cb9276417494549cc77b91ac676f8a11d565c7c376afef657e55caa2a3fed23b21569d4ce984b558b774e31ffb5a8ba50fdf39bb3c95
SSDEEP
1536:yzfx7c0lQLwSLGW3Nss8ANKG1xTQnIoonq42/GZGEQn:Qf69wSLGW3BND1x8ondnZYn
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb7106f798bc469d792a4a2fde5d9ce0_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE