CancelDll
LoadDll
Behavioral task
behavioral1
Sample
07c23bab0f5f53cf7ec3c60aee648985_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
07c23bab0f5f53cf7ec3c60aee648985_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
07c23bab0f5f53cf7ec3c60aee648985_JaffaCakes118
Size
131KB
MD5
07c23bab0f5f53cf7ec3c60aee648985
SHA1
d6b9e2cbdf8c085110ce6dd895a00e5897133786
SHA256
df36bde054b072f2540d2b9a802e1b86bab613e1f435285cc69d0200a8ed6d2b
SHA512
3c4ca6a911ca6d9c70e0f0426fbcb31d7e3f654dfa8b0cf7dd99c18243fd162ae5c702ff92e2f7860fe1b98fbb5c42ce24a9d9828fe5bce0b7bc3f0470e358c6
SSDEEP
1536:9NEFUaLBF/H8laUMl3qiunkfl03PGEfijaoc+4veQ7VaXNJAk0:Izj/c3sL1NCvuaQQGJk
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
07c23bab0f5f53cf7ec3c60aee648985_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE