CancelDll
LoadDll
Behavioral task
behavioral1
Sample
0f58a9fc8198fd52e32180c1b7c2f0ab_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0f58a9fc8198fd52e32180c1b7c2f0ab_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
0f58a9fc8198fd52e32180c1b7c2f0ab_JaffaCakes118
Size
96KB
MD5
0f58a9fc8198fd52e32180c1b7c2f0ab
SHA1
f12a58aacf48bb80db17dc9bf0cdb30535eb15c2
SHA256
5a262b9954da528994671f568ace74ff1ade1e58aa6c0ec9dd5cd72a78fd7874
SHA512
7882a772081f37fbe1b9406019a5cb38fcce8ff0f82e410ffc6fe3aa3aeeca7746b4d4f5b640e2de4d4cf403d939e39c4600ee3b4b94cac85e4a1ecc411741a6
SSDEEP
1536:oCIHAdq3SbklcbDZ55TKqZN4GsjBJhSP8RZJTkJgcTJm+:oIdqCbk6bN5TN4GUBnSP8RZJ4JNm+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
0f58a9fc8198fd52e32180c1b7c2f0ab_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE