CancelDll
LoadDll
Behavioral task
behavioral1
Sample
092ab032f3d02856acde28bf0a01b4d9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
092ab032f3d02856acde28bf0a01b4d9_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
092ab032f3d02856acde28bf0a01b4d9_JaffaCakes118
Size
85KB
MD5
092ab032f3d02856acde28bf0a01b4d9
SHA1
7251d1e9a408763b5621799a2c741ca73177ee3b
SHA256
1d157497c47d756c098e7a8066380456abc546a8deea32ca5d454e53cb92dc00
SHA512
f600ac891306ca857a4c6fb21e52116e7526dea8ce8254b421598a0756764d1445589ac29d4a757e052cc5dbcf715a8f0bb54e0dae776f6225437de214729826
SSDEEP
1536:/xLK2OReR3CHo78W65RlfOFo1tNAtEC46Dyus4Bzoa4ck+g2z:ZVOReRyHhXlqR2KzsKcN+J
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
092ab032f3d02856acde28bf0a01b4d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE