CancelDll
LoadDll
Behavioral task
behavioral1
Sample
07b1dbfa64699c4695656da0086b2932_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
07b1dbfa64699c4695656da0086b2932_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
07b1dbfa64699c4695656da0086b2932_JaffaCakes118
Size
92KB
MD5
07b1dbfa64699c4695656da0086b2932
SHA1
ab859a4be95d03538ffd153e20d0e69f7da89126
SHA256
bb7ff5b46f6331035d1addd73d13f10faaf91d4a039ca4bc3b8befa66fcc6a24
SHA512
e019f24178a15b54689c981b49dd93049dc1791c84bf1fbd0763695a2f6cf104b83e5ef931eaef5682a780717c8720385b19d0d71db8820031f86d016d9e243a
SSDEEP
1536:/xLK2OReR3CHIAjjYE7EAll3emgO12fhu1pcJ+:ZVOReRyHIOsE7EAlgOB1pL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07b1dbfa64699c4695656da0086b2932_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE