CancelDll
LoadDll
Behavioral task
behavioral1
Sample
097dfc76965a788779b789bca540a8a9_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
097dfc76965a788779b789bca540a8a9_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
097dfc76965a788779b789bca540a8a9_JaffaCakes118
Size
92KB
MD5
097dfc76965a788779b789bca540a8a9
SHA1
7fd315e931d91d02222d26d28e88798661ada82e
SHA256
717ff2fde9cdfc9632746a7fa292ba56e1246b1ef0f8856e63c428333c9590b7
SHA512
16b19b0224c95fe397cfccd7f98ba858df68b084f10a289a5ce94d84311c17e80d0ffa65c260bb0ea29d978f9d192e2b6751d4f2356b1e265bfcaf1329f5bb5d
SSDEEP
1536:7rOUbmJ/ZS8DDf/zYRUz8XYizkiX9J3f/dc2aBWNd3V4t7G:FbmhoODfLYc8XYi99Nf1c2aBWdua
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
097dfc76965a788779b789bca540a8a9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE