CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fa201d029079b6da14c9b28352c9a1a8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa201d029079b6da14c9b28352c9a1a8_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
fa201d029079b6da14c9b28352c9a1a8_JaffaCakes118
Size
89KB
MD5
fa201d029079b6da14c9b28352c9a1a8
SHA1
5454ae7747ec8429afd521b70d9a3bc4bd621341
SHA256
028d82650ea225e40f8facb0ab8ac6415bde5d162997126a95beaa35822fdba2
SHA512
ffb7664772f759f62c61b6a3edcb25e84294ec352920b77be67326f75abf5de03d28d1d6038e0d23921dea67f369cd956d1c4ba161bb40cb0efafc453ae56305
SSDEEP
1536:zMHSIHT9yM8vKOQ1Iw2E7nfO7nfC5V4xxyiaef8n065a4PXqg:z1QT0hvKOQiw2yfyfC5mZLF6pPXqg
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa201d029079b6da14c9b28352c9a1a8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE