CancelDll
LoadDll
Behavioral task
behavioral1
Sample
ffa02d571771babc5a37dca2742623fe_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
ffa02d571771babc5a37dca2742623fe_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
ffa02d571771babc5a37dca2742623fe_JaffaCakes118
Size
101KB
MD5
ffa02d571771babc5a37dca2742623fe
SHA1
80e9cd9526841c7fa3868f52fe31f3f594b38f1a
SHA256
20e8b1a9488bdcfedeb59fef2cc53d078db8465a403687f24297d03fb4a2bdd3
SHA512
bc8559ae4f11a4dfe66002a0bd2cd7ee7ff5f5e233c6ac5b9c63541ab94f81a8220a75a2e535860b0c908a1256a36187bda08d7e4d376173f956da02bf127b41
SSDEEP
3072:0OtFNv/r7r0h345VH5YEFiX4DTA45AshXgA:0Otbj7AS5niX4DTjZJ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
ffa02d571771babc5a37dca2742623fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE