CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0a4047e8374d33ed8d3de29dd2ab79a2_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0a4047e8374d33ed8d3de29dd2ab79a2_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0a4047e8374d33ed8d3de29dd2ab79a2_JaffaCakes118
Size
98KB
MD5
0a4047e8374d33ed8d3de29dd2ab79a2
SHA1
78eaaeba4298c65ca82f1328413ee5d36b6471b8
SHA256
a19be44a0b331ae2ccf995ae41abab8d15bac741ebc47de51328976c8c8d807a
SHA512
6ae2e27d426d1301fab6b33a9b8207b5c0b982cc04163f4c33088bc707ec380d4511d6dcf58f08dd6fcd74b1a475e169b808757514e19f2110b1b1913254c6d6
SSDEEP
3072:cftJCL0Ie7XRwpfcuUFLxpr5vqsxzQYpmaCM:cPCLUbRwuuUxNvqsxzj9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a4047e8374d33ed8d3de29dd2ab79a2_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE