CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0ad4ced381c0a3399bf93dc349818d64_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0ad4ced381c0a3399bf93dc349818d64_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0ad4ced381c0a3399bf93dc349818d64_JaffaCakes118
Size
84KB
MD5
0ad4ced381c0a3399bf93dc349818d64
SHA1
7d3bb7635fababbcb5f8c3901732ab09e674b8d4
SHA256
1ed78918bd5c5c32d0406a57816bd8671c35f0310bba0e457e3e22341e5676ba
SHA512
d1a05e6b0a889483e34731a3026d8cba502f73c03dbb57dd8598e1c7bbe8d3b734e59893764733be13536d597d58bd1f7b87795d5a4a8d75a9390a5ab385c3d8
SSDEEP
1536:0SBGICmjXCTyBetAxMhf5XRubcigIjikNKujJq31Wu:/BMmjXCoMhicojiSKqXu
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0ad4ced381c0a3399bf93dc349818d64_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE