CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0d4fa172b5dc0863765fa83f708fbbce_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0d4fa172b5dc0863765fa83f708fbbce_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d4fa172b5dc0863765fa83f708fbbce_JaffaCakes118
Size
85KB
MD5
0d4fa172b5dc0863765fa83f708fbbce
SHA1
d4922458aac67fb502430b50290ada3d25820ef8
SHA256
306bcb1ab4299b28656f1c468d40f7ec0bdb3e2780459345225d36052f6a28c5
SHA512
d2a89e059a85ec65cf43a999e6a6f1446c0a870b35e1899c9cb44b746f4a60ad69c65e84a6e5048ce5363c6d2b4f10c45fb8230231e633e45e9b9c858d29bb9a
SSDEEP
1536:RvePeWR6R1TWwm2reMhQgok7+CLnPSdxc/Klj5+:RmPeK6R1TVm2CgokHLPYwW5+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d4fa172b5dc0863765fa83f708fbbce_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE