CancelDll
LoadDll
Behavioral task
behavioral1
Sample
079c9810a04b90f46b32598d4a453f38_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
079c9810a04b90f46b32598d4a453f38_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
079c9810a04b90f46b32598d4a453f38_JaffaCakes118
Size
131KB
MD5
079c9810a04b90f46b32598d4a453f38
SHA1
c2846345ba4b833b39e53c57cb10b37a331302f7
SHA256
989e73501bc5139d00fdbecaf9acc78f438e27930ed852e001ff5e86fdca5127
SHA512
6d2891e2c56cc715248309e919f9a8f703a9f1ba69642c4ceb9252dfff5192148c91b04e8d15e2e4eba2475b29a29ecefd1cb13232442e6f997e98649055f7a7
SSDEEP
1536:9NEFUaLBF/H8lM8QWcOL4jXISmaE/3xz1Vkbe7CT/uLS:Izj/cK0cRBmaC8e2Lf
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
079c9810a04b90f46b32598d4a453f38_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE