CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0a09fedbc45d5a6e7ff8278f45738b0e_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a09fedbc45d5a6e7ff8278f45738b0e_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0a09fedbc45d5a6e7ff8278f45738b0e_JaffaCakes118
Size
96KB
MD5
0a09fedbc45d5a6e7ff8278f45738b0e
SHA1
df260e559d3b6fa93fe55fd4954ec55d3401ae36
SHA256
868f64d0cd62f5fc4ca38e2f0031ea0dcc6751474ae8e89fd974aea63d5be892
SHA512
5dfbead3279ac305d32b720fd96a23deb067e197ae616fdcdc4fed18c6661baa57f00bcfb9a4ec45c7b57793762c054ce8d0bf1f0daa0b354f4e33763b8be88f
SSDEEP
1536:IKdAOqsG/xxNfTMf/la+QezgbHs3CQHXuJR3IkpwpJnmu6nDV3mrpQG:DAXsGtfTMf8azQM3CQ3uJJ7eJm9n53lG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a09fedbc45d5a6e7ff8278f45738b0e_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE