CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f506d9304d8bf47b9f6d2347730baf32_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
f506d9304d8bf47b9f6d2347730baf32_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f506d9304d8bf47b9f6d2347730baf32_JaffaCakes118
Size
105KB
MD5
f506d9304d8bf47b9f6d2347730baf32
SHA1
3c4acaa9a1bb2477219c6a9e7c478a7d2613250c
SHA256
7606ede5d7fbf2f42807384bb83e3397f5e8d17e8498ab769bd86d3ef6d52acf
SHA512
21baa503996feef95dfdafc3400f4855171eb901993e22d0e53f8d92568cba7134bd52dcaddd14ca3ed06f474b7b492590cd0aa49d62eef3bc7a6418d87fc7b6
SSDEEP
1536:Nr1O1I7ZMTSrnTtanLJNUv7R0WUkhIxjCuH8G5FYdrn5tHojugH97stqJlcVl:N9KTSrnInPUDRP3Wxc8uHojUqJl+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f506d9304d8bf47b9f6d2347730baf32_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE