CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0a565ff0e3d8bf0ecbe2660aa0eb74b5_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a565ff0e3d8bf0ecbe2660aa0eb74b5_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a565ff0e3d8bf0ecbe2660aa0eb74b5_JaffaCakes118
Size
89KB
MD5
0a565ff0e3d8bf0ecbe2660aa0eb74b5
SHA1
68c718c609e172e6e66dfc132cde42338edd2f9c
SHA256
3b1c98240397f977f5e636fbb15ebe9395a30783164fe1be79fb04326bd80189
SHA512
43ba2d00ccf68a7a0c47935f82c5b5d139645ff6bab0e179c1354276f593225a406edf9518e7b843fe084e5b8b64e3a2761bd9fbe9807cc12e6bf2a4c2940d5b
SSDEEP
1536:fiJJJXbJlTYTnkdduh4VXRnrwe5nav9VPRWkrNhN0Cc00d:GJvpYTnkddvXhrPM/PR/5D0Bd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a565ff0e3d8bf0ecbe2660aa0eb74b5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE