CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eea3d009a55b2171cd2e84da25077eed_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eea3d009a55b2171cd2e84da25077eed_JaffaCakes118
Size
101KB
MD5
eea3d009a55b2171cd2e84da25077eed
SHA1
0e530b0e574873b05c05297b8f7ac1771c273c79
SHA256
dd85ffe3e3857b9f54b594b5e39d3603a1e32f965d41900df69b56d090f85207
SHA512
af121f2ed83f30f86a1226f5f70a8b48408256293ce3f164f3ae4497677646c1d34c3122a50479396c8d2c5574b36995c6df3382ea816378be494233c8226117
SSDEEP
1536:7rOUbmJ/ZS8DDfRD/7w9cofilK7kgU4NVWmxxAfDAR5XEt:FbmhoODfRD/7w9c9zFcxA7Bt
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eea3d009a55b2171cd2e84da25077eed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE