CancelDll
LoadDll
Behavioral task
behavioral1
Sample
092dacf946dec34c2d4b6458c16384c5_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
092dacf946dec34c2d4b6458c16384c5_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
092dacf946dec34c2d4b6458c16384c5_JaffaCakes118
Size
131KB
MD5
092dacf946dec34c2d4b6458c16384c5
SHA1
bfe52281da3c30f2a1457a99be369445cc47edc1
SHA256
1084323838354d74d95bd05e59104b500f0315b55f5610b5c3feefd8aee61c67
SHA512
c9cbd9ec2ddcd06955bb3705acdd0b03cb5c2c02393b61fdcaa257d1af11161eceea736f62d079865e75b6bea2827e52ab4d68e98a8f24137661b1c642ff6a3a
SSDEEP
1536:9NEFUaLBF/H8lakKFYw164txD/WRXwCfOM0zKGl0Ylkv:Izj/cUx162VuRXwJzKGrQ
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
092dacf946dec34c2d4b6458c16384c5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE