CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0ee8545652c90d18a5905be79f01ea64_JaffaCakes118.dll
Resource
win7-20240903-en
Target
0ee8545652c90d18a5905be79f01ea64_JaffaCakes118
Size
93KB
MD5
0ee8545652c90d18a5905be79f01ea64
SHA1
5b0b0546c459879e2b56b5db2b73331a0e8fc1af
SHA256
c046cc4def0947e80ccc50951008916fe1bac241aeb1d3f3226a07970a273eca
SHA512
562431275c99d4674335bb876f3598db44f8140090937fac5ced9095cabb4faae4bc9ebc810663e19f048a8fce6d1b4abe07d090ceef8a42479c3dc7b0eb9f6d
SSDEEP
1536:TD6K271gp7DXHQ49AU8pwDufUzwQxwdi7+UnprYfiX:TDGYLwwupEHxwOrYg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0ee8545652c90d18a5905be79f01ea64_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE