CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ed9a1d26408c6279800fbdd635302d55_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
ed9a1d26408c6279800fbdd635302d55_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
ed9a1d26408c6279800fbdd635302d55_JaffaCakes118
Size
128KB
MD5
ed9a1d26408c6279800fbdd635302d55
SHA1
981e371d3f70d16c7a4b8d056473f40d898a4005
SHA256
1dabcda641f3f0a76b8b997a01f84323e329e048693b3ff5f5c4affbee119f4e
SHA512
e5ea99b26df2167203c9e46836033b67074953165eeffd5a3cfcfff0e96bd3a330c6b224b935736d6c8170f78db6a76dcc35c9b348c56df5aa95932ab1db5456
SSDEEP
1536:6Rw9k6k1FrHc5PPa/U/g97v0p0fObc81QnXtU4G:/cHr8RPaog9D0pwOb22
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ed9a1d26408c6279800fbdd635302d55_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE