CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0a1b937e29d28064059eb7a5900c1859_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a1b937e29d28064059eb7a5900c1859_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0a1b937e29d28064059eb7a5900c1859_JaffaCakes118
Size
85KB
MD5
0a1b937e29d28064059eb7a5900c1859
SHA1
9065541c3585de8fd0f4d2d29277f92fd6b5323d
SHA256
cec4b82d26ece840ffc20989e839d014f4cf0e1507180ec1a452ee8df3290b99
SHA512
f12b0d8e60660899ae0f58c002ddb26fce7d44d066c6d00cc893a9c239a69f988e993b7ed536908c5a2b7143ea52eca58989a2c272935aaca0ea584669c66389
SSDEEP
1536:kFjbtlR0g+MaGefEFlaScpfG2W0n/jzT/X8k6j:k1plR0g+MGEradJG2WWr//X85j
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a1b937e29d28064059eb7a5900c1859_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE