CancelDll
LoadDll
Behavioral task
behavioral1
Sample
f89014fd1787854c59111a0e6d14b4f8_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
f89014fd1787854c59111a0e6d14b4f8_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
f89014fd1787854c59111a0e6d14b4f8_JaffaCakes118
Size
105KB
MD5
f89014fd1787854c59111a0e6d14b4f8
SHA1
f992ae7bc9b20684405912542a0d5bba9c0b0ae3
SHA256
1ef4a0ceb67082d9e6a816172cfe40d334d7618b71bf72a05107d7e1105cd645
SHA512
94c8491530a4c44d005b53d0c70e47c04809d1cdabc25a6df4c1ce1002b5648c38783be9223b6f4dd898a248ba281a5f8c441e3c107f7ba56a06de952ebf2950
SSDEEP
3072:qWNTHTey5HC4jUfEVsjgYEE17Eo0s3zixbEe:qWNDTB5UfEVCEE17N0s3EbEe
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
f89014fd1787854c59111a0e6d14b4f8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE