CancelDll
LoadDll
Behavioral task
behavioral1
Sample
07c88839c083ddf7ecb11e7bfde38ea8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
07c88839c083ddf7ecb11e7bfde38ea8_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
07c88839c083ddf7ecb11e7bfde38ea8_JaffaCakes118
Size
121KB
MD5
07c88839c083ddf7ecb11e7bfde38ea8
SHA1
a88415eef99c8cd7933d6a4a283d6e8e6f9a2c49
SHA256
dbd9d526b11c430a4ceab3ab228f0ce55930a98cdd1107cecc8199f982fc66b8
SHA512
f02dd903a50d91f4aaa9c14e4cfd69d0fc8bf0984f02d635164f0859dc2bb0588d5ed249218c1d52a3c2d04c9c6a70a99494c6ce4b421b1be3b294e16ff79b53
SSDEEP
1536:6Rw9k6k1FrHc5P3jzLkYeET9F7quESOcVxk1:/cHr8tzdHnMTcS
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07c88839c083ddf7ecb11e7bfde38ea8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE