CancelDll
LoadDll
Behavioral task
behavioral1
Sample
15606c732a970e93d3b4c5f219ae1d0f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
15606c732a970e93d3b4c5f219ae1d0f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
15606c732a970e93d3b4c5f219ae1d0f_JaffaCakes118
Size
94KB
MD5
15606c732a970e93d3b4c5f219ae1d0f
SHA1
90c5b389ca54986f41e14a2e23383d27e0c3ed48
SHA256
273a7290c60397dbf6219dc1c5b9c21268b0e89f61b203d6d5296e3d0f033ced
SHA512
a31debafcf366a10f2643a43eb3c3fe44571004fb7f16b708f5d8f9962cdad7521a00a347ca597dc72cacd0c0130c6850e6990d2d4f3b8b39cedb7ff1063f667
SSDEEP
1536:nw0yKsoJxGqtBehZQywoJgAe5+efjFnHxOpZ0S6iB+kCdQkWsH7W:RHJXBAQyhyFR0CS6iBfkQkWsH7W
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
15606c732a970e93d3b4c5f219ae1d0f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE