CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eb94889a56b907936f469349be5bd698_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eb94889a56b907936f469349be5bd698_JaffaCakes118
Size
97KB
MD5
eb94889a56b907936f469349be5bd698
SHA1
8a1eec62f6cb6026bc3e5b60867b17ebb4f22c9f
SHA256
361dcc279ba567c35e264a622b398e31fe744bddbc379844e78555939c182b38
SHA512
69a832b14052cdd4e486c1ffff14efc80b38522e47c7dc3094fc576ff6c7a11b71109d6ecc02a099497122856f61c3db6b696248819a3d59a6582489cbb45bfb
SSDEEP
1536:xNWujxA5EY8DwKt9ETXondjH+sW7l/sbM4xaV2FLjx:u/2Y80y9tdj5WJ/sbPxM2L
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eb94889a56b907936f469349be5bd698_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE