CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f771d3b4568ac21ab1a4cf0fad2c08ae_JaffaCakes118.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
f771d3b4568ac21ab1a4cf0fad2c08ae_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f771d3b4568ac21ab1a4cf0fad2c08ae_JaffaCakes118
Size
135KB
MD5
f771d3b4568ac21ab1a4cf0fad2c08ae
SHA1
1a1b9e0c0515339245f0b478c9e50416ffd7943a
SHA256
a5f081c3aa4dac6da1cfc9f3536b8b86da380bec6e071310062d068a66060709
SHA512
c7fbea020b01ea580cc115b98b3effc48acf8dca9f134f3a42865b55da48b1eb283370321c0678dc93c4563fa45a802d178a63dec346b7dc509b398036195af0
SSDEEP
1536:MDEFUawhF/H8fOnSrO2SUWFd1arABd6NpP0IZnG3S8epP:j4D/chW9d1jBwp9ZG3FeZ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f771d3b4568ac21ab1a4cf0fad2c08ae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE