CancelDll
LoadDll
Behavioral task
behavioral1
Sample
fd93a54049873fbf7ea5e40d67c38ce1_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
fd93a54049873fbf7ea5e40d67c38ce1_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fd93a54049873fbf7ea5e40d67c38ce1_JaffaCakes118
Size
95KB
MD5
fd93a54049873fbf7ea5e40d67c38ce1
SHA1
e0838ef53cae0969a39ad6ab070eca2b1ea09f51
SHA256
c25a799234ada142254f54bbcf93569f1a800e7bede6ec11ac386cff92cdcedc
SHA512
4aa0bca4be02a5e03b29ec31d74915ad4d4352dc344f1fadf2f22e22acbb165d06d5e949aefd29cc8a15fa20f4c20368d74eb3f50c37090cd12fd02eea7a797f
SSDEEP
1536:SAVJ0mWeB/iU9QDHf7TXdXDN20YDXYh6kot0HX66xDw/bibA:zJ0mW8/ipVDN2jXY8N2366Rw/bic
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fd93a54049873fbf7ea5e40d67c38ce1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE