CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0b62e5734c9738393eeafe73cd98a3aa_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0b62e5734c9738393eeafe73cd98a3aa_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0b62e5734c9738393eeafe73cd98a3aa_JaffaCakes118
Size
101KB
MD5
0b62e5734c9738393eeafe73cd98a3aa
SHA1
0dd0918a558917a6d04836547c88ebc15f14e0c0
SHA256
264052f05272cc6340f1d8ebeeae4309519c38702940bd13b3c637b0df86aacd
SHA512
f10a1ba2830dbc957d342da74a1e012f0fd29b241e63cb2385660b02694edde7a90d4b8d3d450c002ea21cfabdad4ad16a0839f01fa6c2cecfafe09abc482158
SSDEEP
3072:FfUxhDtZp8vIdCFvIcZkYrJuv9Zgw3/6Vl0g6:FfghRT0IdCBIc5rJuv9tvx
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0b62e5734c9738393eeafe73cd98a3aa_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE