CancelDll
LoadDll
Behavioral task
behavioral1
Sample
09da1b8b67cba2dbf2bd5e50c140ff54_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
09da1b8b67cba2dbf2bd5e50c140ff54_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
09da1b8b67cba2dbf2bd5e50c140ff54_JaffaCakes118
Size
108KB
MD5
09da1b8b67cba2dbf2bd5e50c140ff54
SHA1
69f732796576b9dff8f1a6e20c8fe41d9f5be47e
SHA256
de64ffbbbe065c31b9da6039b0fab8c24883cd27c03f3597e422df1c11094ace
SHA512
5a95ccd30d9275de5a04b916db86216dc8386a33f7294ae096ff34cf81531e7fa4ac0057de068ee2ee9095048a9fbdd25d3c42fddd74f8832c07fd24ca05d239
SSDEEP
1536:i64W3b/+sHTUxLuS2vHFIqjbZcsXa5t82yhDMtuEmXqEDuWissXC8NT4xNQ:1b/+sHfNBcsq5i1SgNKVXzT40
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
09da1b8b67cba2dbf2bd5e50c140ff54_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE