CancelDll
LoadDll
Behavioral task
behavioral1
Sample
095ea10d3751fa6418eec4efb43fa070_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
095ea10d3751fa6418eec4efb43fa070_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
095ea10d3751fa6418eec4efb43fa070_JaffaCakes118
Size
90KB
MD5
095ea10d3751fa6418eec4efb43fa070
SHA1
3c6fdd22a8212b92cc45a9a2998a2d617d640187
SHA256
3da5202d499849d266469b7e8f1d1f4b9ff4312de784231e558abcde337ab402
SHA512
101da6f8e630101e0c568fccb86949463a474365b3936b09de597da696f2e2420eff3380ebc8c251be6311622e173b0fc86d9d4d4f0631cfb96a3fa596dbed5e
SSDEEP
1536:5/72Y9JesUPKHuvBLRAOAsNt2zJw5kpsqx+lmi/GzBVeFlgo:5DP9JesUh5LRAkNtk6QCf/Gzrevgo
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
095ea10d3751fa6418eec4efb43fa070_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE