CancelDll
LoadDll
Behavioral task
behavioral1
Sample
191656e09b50a1b583cf8bfb32c68d99_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
191656e09b50a1b583cf8bfb32c68d99_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
191656e09b50a1b583cf8bfb32c68d99_JaffaCakes118
Size
120KB
MD5
191656e09b50a1b583cf8bfb32c68d99
SHA1
0c4a340eea55b620615c995adc7618705942caf6
SHA256
a07dae7bf5386def63ce07a883a8f14c0d83f33fe0767bad1d335b61f5537984
SHA512
f21fd1602212f4dbc51cf8c369c88ad22b0528100aae17f9044c1622698219927ab6c31fdd39688007baeb6cb4a1248a1b08c6fd69b70915f0e3d840dc291eec
SSDEEP
3072:x/2Y84CX4SZNql3YN0SKgqsc7WM/ygrDGPlUR67:p8Nql3YFKDsc7jagrDslX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
191656e09b50a1b583cf8bfb32c68d99_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE