CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0c53a39213dff8cb615ba12abfe0b182_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0c53a39213dff8cb615ba12abfe0b182_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0c53a39213dff8cb615ba12abfe0b182_JaffaCakes118
Size
83KB
MD5
0c53a39213dff8cb615ba12abfe0b182
SHA1
f946777869b3b661cce63fdfbcb5a59d60400757
SHA256
77ed554da8491932c277171c1e60055c63f9d0116c99e8eef86851c0918e849d
SHA512
2aae439c466862adc7ef3d5acffd319b8621beb42cccfcd70b1c85fbb22164ba252a3852e49e1d1f9a42cb2b14c2d0a902e56d6042d4367868be717255fd1f47
SSDEEP
1536:LmSQNbJE1vj8gDxkOiNYIp1z5YVWqWO2mBIIW7oWi/Pw:LmFty1L8gDyOiNz14W+BIIWd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0c53a39213dff8cb615ba12abfe0b182_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE