CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0de3a19a8d5d4e4709a08c89e2a0089a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
0de3a19a8d5d4e4709a08c89e2a0089a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0de3a19a8d5d4e4709a08c89e2a0089a_JaffaCakes118
Size
98KB
MD5
0de3a19a8d5d4e4709a08c89e2a0089a
SHA1
d5bb4834441b9769db31370f8b4d21ae687e3ca5
SHA256
dc246740bd555bc216cafa5a818277a38276becb4b7afa18909b98fa1446a3cb
SHA512
d33374193e178e08a193b118c09bbba7577029061272c103662311a8862fbfa6e588604391d64c0062e8a1919cd694d8445f0eb5903956a0604610ba39acd476
SSDEEP
1536:heJckZaGRzCuu/6XnhBbgA6UFFC0y/xdpsfwWepGu2ydzpahd:gJvs2A6Xh/FcxJWepGu2gahd
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0de3a19a8d5d4e4709a08c89e2a0089a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE