CancelDll
LoadDll
Behavioral task
behavioral1
Sample
eff9c8a23be8ed9c4927d6a75c955ee6_JaffaCakes118.dll
Resource
win7-20240903-en
Target
eff9c8a23be8ed9c4927d6a75c955ee6_JaffaCakes118
Size
88KB
MD5
eff9c8a23be8ed9c4927d6a75c955ee6
SHA1
0727458252b3fe5b3dce01045f7ea2b71d370055
SHA256
5e808961b26aec33baf5abcc38f19ac1dbbb560aa08da14a987221fefffddd5a
SHA512
670610b259a271d27a6edba109fad1b2f705d8ad216754bf34bde4297563d6c5754d7d92ac7da9c3fff786c6856d019b223e5e4382a7d2a33f5967ddde0ae862
SSDEEP
1536:TD6K271gp7DXHQ49A0mOlOR5Snk2k0FiFUajRG0bO56CXmt:TDGYLww/mMWr2k04FTRGaO56ht
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
eff9c8a23be8ed9c4927d6a75c955ee6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE