CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0d845e1302c8f8c915143421344dc864_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d845e1302c8f8c915143421344dc864_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0d845e1302c8f8c915143421344dc864_JaffaCakes118
Size
94KB
MD5
0d845e1302c8f8c915143421344dc864
SHA1
8a395d64ccea89d0709d431a1163fa7501261210
SHA256
4c5b90e3d2e47cf2467e5baf50726d46c93d145ea1259d7017435d2ce689c0bd
SHA512
3da15bea406f3722b19a70c5ca3b47e3b06b63c8e28de1af0efd5d47e5e58803aaea2a367554185b7817b950bb990490cb623987d1f0467bf57ca7989de40cb8
SSDEEP
1536:XpoZectu35iLnGlfahGyL57EoTzVzVtH8e/gLDv1:XpoZP8ijIfasyL5Yo1RtH8e/gLT1
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0d845e1302c8f8c915143421344dc864_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE