CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eeefdfd9caa34fd2a61769b2888d1b49_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eeefdfd9caa34fd2a61769b2888d1b49_JaffaCakes118
Size
4.1MB
MD5
eeefdfd9caa34fd2a61769b2888d1b49
SHA1
edaa127ecd15f2e628254d3878d40c745690e147
SHA256
8d5616764d819e896e0c7960db224d717744ce561a93ed22c10f9a0193a56935
SHA512
2bb5c30e9e81af1353102302fc5703a42dea100eb0ab4757e4b45254f0a94cc9f047de9274af6a322429be8c2397646bf0060327ad62d2fe95b6680d969fde49
SSDEEP
1536:pE242owFSaoFWMUiZ6Blsnb3pSwVUQ9SQlMj9AkD4uULe9wwr:pE24hwvoFW6Z6LsnzVUHj9DYqr
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eeefdfd9caa34fd2a61769b2888d1b49_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE