CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa07effe6a7215e1434811b9379c2727_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa07effe6a7215e1434811b9379c2727_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fa07effe6a7215e1434811b9379c2727_JaffaCakes118
Size
104KB
MD5
fa07effe6a7215e1434811b9379c2727
SHA1
be791349496de3d9e3cc888dfa6ead91d8b3a8f3
SHA256
226298bc7fe669e8aec302e670c05865185a024b0f1c22dd71634442ac2c4f45
SHA512
ba407b45b9cb1bbb51081b2c901b3e81a929c8ede60d42a1b3665a4448bd490b4dbbd025f7e2b662f5f6e5f533da1083844dadc44c05f77b97e159d4666cb945
SSDEEP
3072:qWNTHTey5HCsuE4w+doa4NcfQ3ZnfI64bjIDo:qWNDTBAEFa4NN5cjco
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa07effe6a7215e1434811b9379c2727_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE