CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0ff21c8a98da8fcb2ebb0dda9f4c31fe_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0ff21c8a98da8fcb2ebb0dda9f4c31fe_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0ff21c8a98da8fcb2ebb0dda9f4c31fe_JaffaCakes118
Size
122KB
MD5
0ff21c8a98da8fcb2ebb0dda9f4c31fe
SHA1
286f628c866408e140a03e9e8a9f3243dee3dbd3
SHA256
a2ad1e5afbcca03e6dd73fa572d59c15fe5d30e322126179a4ac67d00a7ed6d3
SHA512
d7e33b89e6d9dd6fb05d9f8d53d04644f82f3a972532333c408cbfc7c786b9c41b8c7d4ccf9f62726f5ec06e8cc606d0594edfd9fdd34101e9b8e3b0d6c30500
SSDEEP
1536:/ePxCUjeSp7qrnhBbgA6U7eLKeCiUEjMo3gB+ys87jX3HJk9UiASdZx0TeR0BXxT:WPxpuLhl6PCB05gIyH7jSePSdZWw0x7
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0ff21c8a98da8fcb2ebb0dda9f4c31fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE