CancelDll
LoadDll
Behavioral task
behavioral1
Sample
16dd8120728491f86f54e4f50213e1a7_JaffaCakes118.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
16dd8120728491f86f54e4f50213e1a7_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
16dd8120728491f86f54e4f50213e1a7_JaffaCakes118
Size
108KB
MD5
16dd8120728491f86f54e4f50213e1a7
SHA1
aa64f8e30b14b76fef439dc74d0ba0f5e703f02c
SHA256
973bd9e17b434657a7800db183e83ae441befcbe0a8b7ce83b3cf5f6ebee35e9
SHA512
c199f86bf42aea634fd64903c698ca26d2e0ac09fc61cc490a9405f84ede525c0faa2666bf5e14cba5b1b9dbe594c7af142722f76422b38fb5b9f2c254aa2fb8
SSDEEP
3072:Zfi3b8enD3tzowNKv8EnPf7jAjNFBPC9pL:Zfi3bZD3tzIv5L+BPC9pL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
16dd8120728491f86f54e4f50213e1a7_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE