CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0a7cf284c0e09e967afce3b7b12f6271_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0a7cf284c0e09e967afce3b7b12f6271_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0a7cf284c0e09e967afce3b7b12f6271_JaffaCakes118
Size
90KB
MD5
0a7cf284c0e09e967afce3b7b12f6271
SHA1
b42b652011cc9a968f7c1212352674d5b3ab4bbe
SHA256
371dc06d31546549931fd99b4fa74c1d2655e8de1a1aa2c3728c40c8a8c9deb1
SHA512
cd075bfa4c2a79a31fd0ca8cf1438d366c93033913ff783c6984499488139b249f4eb9cdbf6579f9debb95403d5bf5c33fe9f70d047af0cd21dfe8f3885307b6
SSDEEP
1536:0pstl9F0gv/r7r2Z+z1c/L8mPq2lvSK2YcT+BbwMnDmRx8i:0OtFNv/r7r0+z1cD8mPTlKK2lKcMn+xL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a7cf284c0e09e967afce3b7b12f6271_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE