CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0bc3ad43c8ae99f558b92787dc4f401a_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
0bc3ad43c8ae99f558b92787dc4f401a_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0bc3ad43c8ae99f558b92787dc4f401a_JaffaCakes118
Size
100KB
MD5
0bc3ad43c8ae99f558b92787dc4f401a
SHA1
fc74c43ee44d0487d9655436618b0b7fc0932da0
SHA256
4a2c07f8d2c771a4e02fccc406a835d099e443961d96fb14d3e82f93cb8e4cfd
SHA512
9c6fb782828a3e25b6931cc7e376d110fb0e47529df33d1915f51ed3b8ff202c22877255d105dae2ac7e742761a3109df790338339517167aba1ff594dbaa220
SSDEEP
3072:02RWdNEp4Lsi2Ttrr27BMHIgoibiyHxCM:02RWdNEqgzR2lkIgokiJM
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0bc3ad43c8ae99f558b92787dc4f401a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE