CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0b2d3e8fbadae8bf0a33acc7da178b2f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0b2d3e8fbadae8bf0a33acc7da178b2f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0b2d3e8fbadae8bf0a33acc7da178b2f_JaffaCakes118
Size
92KB
MD5
0b2d3e8fbadae8bf0a33acc7da178b2f
SHA1
f96cc21041a1cbdac282758bc49958bd68d668ab
SHA256
c901f27bae6b389b754e9f394f35624f14c4826c57d2fddbc272bbe725136d05
SHA512
99e5461d32b9c5372c2226357e0174723f62932ffc2417ee1190634fda7625158db7dad8f8a491e91f202e8d0fcbc4314eae6dab1359bf9ad85bd9f140d8670f
SSDEEP
1536:Jj3lafACV9qgjasHzYYAjDzbyvbhzQWBjulaQtdk7Io/QPJWagGcTUYL:7RCVcAHzYRjDzqbhVul9yhsjvcQw
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0b2d3e8fbadae8bf0a33acc7da178b2f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE