CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0b784312e3d274bdc1742c938d6838b6_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b784312e3d274bdc1742c938d6838b6_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
0b784312e3d274bdc1742c938d6838b6_JaffaCakes118
Size
90KB
MD5
0b784312e3d274bdc1742c938d6838b6
SHA1
97b4631e8d21480bf34b230e456bc184cd1f785d
SHA256
57b070f9b9b8f3acd13d57d7ad4e9df17962ec04c7042a71bc752f456e49e670
SHA512
5937ec39e21296fa2622ae34c036507df51011b2e3303073924736d5974b8ba1671172a5c036c5976c935d66b6d173142b7e582be44e6671b33b334ba3112993
SSDEEP
1536:7rOUbmJ/ZS8DDfnVo05YfGzZxTR7Qo3sr6/O4DhhY11G:FbmhoODfni05YaTRv3g6/j1hYXG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0b784312e3d274bdc1742c938d6838b6_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE