CancelDll
LoadDll
Behavioral task
behavioral1
Sample
10199818e252fa3bf47b022241f72b73_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
10199818e252fa3bf47b022241f72b73_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
10199818e252fa3bf47b022241f72b73_JaffaCakes118
Size
101KB
MD5
10199818e252fa3bf47b022241f72b73
SHA1
d153cee6b4bf2f34670f01e84a442c3e91f35e58
SHA256
ca817f9f026b034ae8659470164c701c43075200a0ac6155076e90ae8ca17a72
SHA512
855e5fbdb30bb7411878b199c698eb8d9b1cfeeddce3f097b226c5c82898cb34e38b78df2e4f51575ed0b4f3c558b49918c586aae737220c4c9bb37656d222f4
SSDEEP
1536:LmSQNbJE1vj8gDxkO1RaDXbou7QZlGdEF/ECvMAmYN3gV43WO2j9:LmFty1L8gDyO1Ra3oucZlAI/EGZ643e9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
10199818e252fa3bf47b022241f72b73_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE