CancelDll
LoadDll
Behavioral task
behavioral1
Sample
170913cf9bb88e7ba352d5b6856b8fa8_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
170913cf9bb88e7ba352d5b6856b8fa8_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
170913cf9bb88e7ba352d5b6856b8fa8_JaffaCakes118
Size
93KB
MD5
170913cf9bb88e7ba352d5b6856b8fa8
SHA1
4e523938a9941854f8ff134bcc6d549a562a3bd1
SHA256
5a676e0730776774df278fb4b1cf565858964397e0407a44b63af3cd64187261
SHA512
b38cc762dab999bd877079ef82bacda5084695e2fad63d15c9df09b6d8c60ad16ad7802ec32ad1355050dd79479fb97c51993d631e0e04517a9f55dbd9ff8a01
SSDEEP
1536:lmoLIIWdNE9jv4LsFgIpkKEP6ech5V1eBVi42ie2uHrQ:02RWdNEp4LsiPKEPgneSoz
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
170913cf9bb88e7ba352d5b6856b8fa8_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE