CancelDll
LoadDll
Behavioral task
behavioral1
Sample
18e955e2665d827b42715e1cbe6395be_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
18e955e2665d827b42715e1cbe6395be_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
18e955e2665d827b42715e1cbe6395be_JaffaCakes118
Size
95KB
MD5
18e955e2665d827b42715e1cbe6395be
SHA1
f50a6e34200a1fea1d57781fd1a7561839e00dc1
SHA256
c470790fbfc3aff04fecf15de769f4da017ea6ea8a7a32fded73897ce61f9b18
SHA512
c1e76b53e6c16fdf444d23ed5c0d02e9c54990377d8ce51151cd2a1dddd6898f9006c4e6c9608d2bea4fb7b761a8a82d7e4f52dd6e8311f711e9c3c6c7cf646e
SSDEEP
1536:LmSQNbJE1vj8gDxkOjwU9p0mX0mt3Q0i15fJRCx0MTuHaX83/w:LmFty1L8gDyOT9GmX0mt8lJRUu6X84
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
18e955e2665d827b42715e1cbe6395be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE