CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0eb6220c20e8a1c531d8067ba1b941dd_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0eb6220c20e8a1c531d8067ba1b941dd_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0eb6220c20e8a1c531d8067ba1b941dd_JaffaCakes118
Size
98KB
MD5
0eb6220c20e8a1c531d8067ba1b941dd
SHA1
cb060758c27b0757a94703eb2a55f4c93d367aa3
SHA256
945e769fa77b873cfd3f57f83d96337e32f30a9cabb781c20a62f81ff1681dd4
SHA512
42138301c167aa71f3a261e708b450d9a5ab049c2d88c05ab6db16c53f2b394f4323a3e174c2eae0e9fba4981aec8fe08f8bbf39b59de3fc745e4ce4b0fd32ce
SSDEEP
3072:IT+BBhMbqB5HcZV/w75VQCLITC6K/MFOkSbbDb:ITsB+eBq3ovWC6/FOnbPb
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0eb6220c20e8a1c531d8067ba1b941dd_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE