CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0ab66ce0e393162e32b7a3e0e2d86659_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0ab66ce0e393162e32b7a3e0e2d86659_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0ab66ce0e393162e32b7a3e0e2d86659_JaffaCakes118
Size
117KB
MD5
0ab66ce0e393162e32b7a3e0e2d86659
SHA1
7947d2cf52ee7f749c5e2655266aa2972c97c9b7
SHA256
d0a9deeec6af12944b1c9a00aa5633c63a84c06e89c5438768e93f3c985c0731
SHA512
60520d1e6381fa6b2ef344670be2ca91fface492889f01216c03413016ea115955372c84c35759d1238714eafd66269bb10314b5d9b9e216d16a151817f78639
SSDEEP
1536:qk9sQZTJD+QMfmnhBbgA6U7bVJqzLm1e4fQiPVlGCTySdFk2d5q26IyX0E4:l9L1xm6hpbVcvm/biCTy+FkEU54
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0ab66ce0e393162e32b7a3e0e2d86659_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE