CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eeb31616fffd179a232c3479e53675f7_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eeb31616fffd179a232c3479e53675f7_JaffaCakes118
Size
92KB
MD5
eeb31616fffd179a232c3479e53675f7
SHA1
2060ac605f7703e33ec9267252ba9463f33980fc
SHA256
0874b7198d19620e2869100adcd170d0f7f6cc93737958e9aeee5b278143afc9
SHA512
f3fdb359dcdf817e6cfd4c00dcc45aa9a223e5858516e70d2c4a86da438d021f8c0f026bb487d8726bcb3230868d0d16da731af096e2a7e16b8eb7377fe242af
SSDEEP
1536:qWNTI2j7IGPmy5guIRpFEOKtERZVj6xUQyrVCLiqji:qWNTHTey5HC80R3jwM3qe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eeb31616fffd179a232c3479e53675f7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE