CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0a835abb46d9b85a7b2adffc894e5900_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0a835abb46d9b85a7b2adffc894e5900_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0a835abb46d9b85a7b2adffc894e5900_JaffaCakes118
Size
85KB
MD5
0a835abb46d9b85a7b2adffc894e5900
SHA1
1be1507b9c4057bc7cec3df6ae21d4beb7d4e69c
SHA256
b0f56bcd0e22709f923e824805a564719e18156e7d13fbc0d4afd90125ea7d8a
SHA512
b32e24ff5421171a0747f2d46e257957aa26a4575f75e2c4458e9923eca8148dfc0d1d5087b9b5266d82870acf8fef1023501008c4e3051de45c640e367bee5c
SSDEEP
1536:DjMKODJPutB+69AmJpXjzSGCiTtqaZQTx4C+EPzgM:+MBpAmTX1Makx4F5M
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0a835abb46d9b85a7b2adffc894e5900_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE