CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1766f73f27db366b6ad9062f1997c591_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1766f73f27db366b6ad9062f1997c591_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1766f73f27db366b6ad9062f1997c591_JaffaCakes118
Size
85KB
MD5
1766f73f27db366b6ad9062f1997c591
SHA1
570fc28fc6fd945023116cd2e58bce70d54fca91
SHA256
5e732a68edd50e2eababe4ed412c4ba13ba1969f565c62a5b1b351dee051282e
SHA512
7361da77c7c14e4dd3c9d2e99eec70788cac856ab176244fd9103e48c2f9b0604e573ca070abcbfa67f595ba12693c87bc42bb6740972271765e479dda97dd3c
SSDEEP
1536:RvePeWR6R1TWwLv8kTH4qznnFPAF4VCnatWV:RmPeK6R1TVz8Az4F4+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1766f73f27db366b6ad9062f1997c591_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE