CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0f2d301eddd8fe4540664ec928460763_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0f2d301eddd8fe4540664ec928460763_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f2d301eddd8fe4540664ec928460763_JaffaCakes118
Size
106KB
MD5
0f2d301eddd8fe4540664ec928460763
SHA1
2e218ab6d1a34f95694102f7bede8dd1011ebbf5
SHA256
739224bef38543e746fadea4bf005854b7c0bb6860a99187baefe018508fddf6
SHA512
181ad0a5f895096cc5f2eee50a1cd1a420b9455fb892f757b316bbe786ba4467fa6475a0e7b49d3849845e69504e434578154fe2e611565494ca194becc16765
SSDEEP
1536:heJckZaGRzCuu/6XnhBbgA6UFFC06ImpB1kTbWBLAf1bP7ofOxaCXJ:gJvs2A6Xh/FK1pTkTiBLKmOxL5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f2d301eddd8fe4540664ec928460763_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE