CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f19d9f37aa1da751b105f7adb1931964_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f19d9f37aa1da751b105f7adb1931964_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f19d9f37aa1da751b105f7adb1931964_JaffaCakes118
Size
92KB
MD5
f19d9f37aa1da751b105f7adb1931964
SHA1
c5c1189f0f30a896a4ed0a3565e894b3a5b916ba
SHA256
73fdf72bf3178072a11bb2525b607c131b29d18e2428d46fe59bb0abcfc0d557
SHA512
2cde74f5d5a253e3f7a1b56849c6b0e21b6e60f3de3c67fa40d140c0e909c89e416e6ca417db72cccbfd1d42cf773768dcef45abbef5a8450b7c12dec3c6bbb0
SSDEEP
1536:OoKR1YFY/H4SXxyBvaoQfT7iwSYtjpd+VxLMMaxA4Pn56tv:+1YZSByxaoQfTGwf/d+VlMM/4y
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f19d9f37aa1da751b105f7adb1931964_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE