CancelDll
LoadDll
Behavioral task
behavioral1
Sample
076c5e227ad0e66d246bc10adbb9521a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
076c5e227ad0e66d246bc10adbb9521a_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
076c5e227ad0e66d246bc10adbb9521a_JaffaCakes118
Size
113KB
MD5
076c5e227ad0e66d246bc10adbb9521a
SHA1
4783bc59a2cace0088a93e0edd3d2071e261471a
SHA256
02bb137b2d9ab9483b5d37b80289b70ff945c0d2633507ccaaa15462f50de5c4
SHA512
5c98bf13634b3d8f2707a913eaec4560c0bda9928d288af1dbf682307428c1f405e6ea8ad8624eea52ab6f863c2cd4de9b5f04987f4cf44d6bd17ad002924a3f
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJq7MqrCz1/TKbO5W1Zrkp+tphwdbBe+31f4hZln:l9L1xm6hpbVcUebemro+t4Vh35WN
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
076c5e227ad0e66d246bc10adbb9521a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE