CancelDll
LoadDll
Behavioral task
behavioral1
Sample
097d301453be349e133852d364744695_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
097d301453be349e133852d364744695_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
097d301453be349e133852d364744695_JaffaCakes118
Size
95KB
MD5
097d301453be349e133852d364744695
SHA1
b4083b8d547c2d1578d4c38cfc476674e225e569
SHA256
979cdc8c52c1a140b5d3280d261e1735c39800885490a43ea9c8503f6eed1ce4
SHA512
357c2922f809750f40e9062eb9fd9e1700b2b8176473a10c5bd921cf6d531f8b2df2dcaffbf10812f8dca56b9f4fa3e93502a57cdd1100832f901bcf71561674
SSDEEP
1536:lmoLIIWdNE9jv4LsFgIxYzAS0exqhy3YOVWOS80OefX0IkSReDbK88q2arqr:02RWdNEp4LsidzAVeUhHOSx/krMeDbhi
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
097d301453be349e133852d364744695_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE