CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1599787ea250b97ef067dd97fbbabfb1_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
1599787ea250b97ef067dd97fbbabfb1_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1599787ea250b97ef067dd97fbbabfb1_JaffaCakes118
Size
88KB
MD5
1599787ea250b97ef067dd97fbbabfb1
SHA1
05169ad9e836adec3ae2fef1dc443700fffd3692
SHA256
0c6ca5655af42f8b471fa67874cabf725790be0473dee9ff41c78362bf03a561
SHA512
e03eb3cb4e97ef098cb9d855ece9f7faf817869ef0d481328b9e90068b38d3e4f3888b08d10dee113cd82b7e07fe5a1b7cacc3b3d5a5ab4ae58799445d5ab262
SSDEEP
1536:iEoS0CiFekw0pR7PN5fEKL20/HWImIOUjFISoRr07t7NbOLeEbMcn/:iEoHek1z7P7fEKL2sHWI08rZVcn/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1599787ea250b97ef067dd97fbbabfb1_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE