CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ee966cf2895268709c452cd04d778a98_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ee966cf2895268709c452cd04d778a98_JaffaCakes118
Size
89KB
MD5
ee966cf2895268709c452cd04d778a98
SHA1
9d18050cd284272d1a6a1a2e81ec73053ac41524
SHA256
1f8361cb0c08ff815e95b39cefdd69cfb47180e805d64b2324de2ab6e87e904a
SHA512
bfea35e920ae2c3fb33a9bb25b537a25e9e13e142586b0328175ef13654d8e6edf6575abe6dd39fe2c51c46d0de41b303ee1e2691efda36775e1e388c3ba6a08
SSDEEP
1536:SM9jsxvhBfnhGEInrfbVrZVi7BCaHhfJNYa:3jsxv0EInzdZa9HtJNYa
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ee966cf2895268709c452cd04d778a98_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE