CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0e9859f4c055b8aa824a3f9d118141ad_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0e9859f4c055b8aa824a3f9d118141ad_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0e9859f4c055b8aa824a3f9d118141ad_JaffaCakes118
Size
112KB
MD5
0e9859f4c055b8aa824a3f9d118141ad
SHA1
f061f743fbbf052c98947ddf9417454ee225bdd4
SHA256
70f4850445ec118723d7bcff39b6cf02cad0088a1c4d73b730fa1a1cd9876194
SHA512
9c55643e2d1a0a03ee96b2d4e996d90def8a397c4faff3ea0c227c3e286656cd9038e9af4ec3ecd09edd85bc53924f993aaacdb21a022be1ea2662e77df04278
SSDEEP
3072:l9L1xm6hpbVch4tNyy/ieVazunHHQr0Lm:hnhpp04tNyaieVazunHHNq
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0e9859f4c055b8aa824a3f9d118141ad_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE