CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eee7bb5a50bd29774d138077c347cc85_JaffaCakes118.dll
Resource
win7-20240704-en
Target
eee7bb5a50bd29774d138077c347cc85_JaffaCakes118
Size
97KB
MD5
eee7bb5a50bd29774d138077c347cc85
SHA1
d0226bc97c997a5705f0192db63e75b34f876f2b
SHA256
2d73aac3dc806422a6a2f93c75f2a5be2f2a7bcb7e5aa228ad1532c103d6a31c
SHA512
2ed43380a0cb4bee03eae88189b6f48b5b1892f2275f849cca62a6179c66d8e9ce90c90d17cf087103d473fa87d234de57eee0e154073c934365e0f1a2e73099
SSDEEP
1536:Gtbad8oQmjBhVNiHseVT1UoSxd1n11+zSfPZ0HMPEC6kq/ycSp917pipg:maSMBhVNgVT1UF1XRnZ0Wx6DlSXppi2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eee7bb5a50bd29774d138077c347cc85_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE