CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0636a30051fad79195ec1410d5c4d4eb_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0636a30051fad79195ec1410d5c4d4eb_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0636a30051fad79195ec1410d5c4d4eb_JaffaCakes118
Size
104KB
MD5
0636a30051fad79195ec1410d5c4d4eb
SHA1
40a2c8bc933792e38a23c710c419ee88eff572cf
SHA256
4b927f7cd6c3b08bcad79b25b503d92fb9a329ea5e6946f60f16a42bfa3f4cc0
SHA512
174b4db2246a9b3af05c585380f3594ed7553d5e9f9496ec1dd80a15fb2acd972807a6d6d306f64b50c6329a133ff03936e15ae375f092ca666e9ae9bae24646
SSDEEP
1536:RvePeWR6R1TWwvKwNR2AHGcJkNDjn56/OspOeOHQkNfY1SBN9:RmPeK6R1TVSwPPJmD7QS/Fb9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0636a30051fad79195ec1410d5c4d4eb_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE