CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ef9a6e9568d566d40183965ddaa5db75_JaffaCakes118.dll
Resource
win7-20240903-en
Target
ef9a6e9568d566d40183965ddaa5db75_JaffaCakes118
Size
98KB
MD5
ef9a6e9568d566d40183965ddaa5db75
SHA1
722b65f5e2a97d11183ff7d58ec14dde7d4c7064
SHA256
85ca0f9eca22438a3dac109dfb4073d7584bdb10b7913b990621ae00f394a12d
SHA512
ad25d5bc31c0c19b890890c7369ad68a96421c86ce48aee02427bb3fb3cf762688882028ea50217ff1c48e577763a07586f0446300fb0e7df5c7cc916f409fa0
SSDEEP
3072:iEoHek1z7P7fEKLSBQs/6MugCn0FCBKbtsMD+u52:iEsekJP7fMBQYuzBBKbtdCu8
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ef9a6e9568d566d40183965ddaa5db75_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE