CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ff1a52c7ea7a8ed7f3e91a7eb297b8ed_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ff1a52c7ea7a8ed7f3e91a7eb297b8ed_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
ff1a52c7ea7a8ed7f3e91a7eb297b8ed_JaffaCakes118
Size
99KB
MD5
ff1a52c7ea7a8ed7f3e91a7eb297b8ed
SHA1
021ee57534ea58b513066e1559c5d5c15bca936e
SHA256
309f2100580a9f8191f1105b740a1fae025cf393e8608eac95c6049cd3d7077a
SHA512
e2740d884b40f9652973704f6f547f68150490ad98fa7810e55a5a4d6e46ba28cf57701333403ef26f19ca222ffbcc2552ea66023bb8b84a715c58aea518e8b8
SSDEEP
1536:JVGqeHHrjdj9qceTQw301erGvGbbjeoaNmRnoA9YGIrr08G:JKLjdjAceTVqZvGbW2oA92ro8G
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ff1a52c7ea7a8ed7f3e91a7eb297b8ed_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE