CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0e90e454f560f8aefbe0336ba3c6afae_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
0e90e454f560f8aefbe0336ba3c6afae_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
0e90e454f560f8aefbe0336ba3c6afae_JaffaCakes118
Size
95KB
MD5
0e90e454f560f8aefbe0336ba3c6afae
SHA1
b97276729ff340c48cc687a8c08160d3b7cb14e1
SHA256
e90c22c4423de79f197a7b1b13d3e22d9840c86c116d5968c13730f9a3c353cd
SHA512
7e7974a0bbdc9f2fc67b005fc51a4c071f3ebd626cf06f4c534175175e302778e2267c7329f1838fbf51a006ea412b7c62cf28866bed196c36737c6dd9f3e310
SSDEEP
1536:TD6K271gp7DXHQ49AWXdJZ96zlqRqKXlnBZtKaT9TKMm:TDGYLwwJLmq17bKalK/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0e90e454f560f8aefbe0336ba3c6afae_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE