CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1932c0319241d0e0f2856f7547a9c822_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1932c0319241d0e0f2856f7547a9c822_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1932c0319241d0e0f2856f7547a9c822_JaffaCakes118
Size
135KB
MD5
1932c0319241d0e0f2856f7547a9c822
SHA1
345df9b3dd5d0447cbc18ee098079fb6b85adb6c
SHA256
001ffa95483cf2b4ebc86b37ab866e8376f86c97af2c52117e1d8a85f886022d
SHA512
05b8fae8cff262fa6b49d686c2e9d5c9d3bfc0ea0bef0857faa9b30d5b379f5129f854d22a3d8004ece8b4938aac2c8d2162bd21547efba2ff907637cafb486d
SSDEEP
1536:AHEkUaLBF/H8XEuLDHNMMG2OC2M1ooUfVuB3Wlk71njmdbS2hB1lyQj+:vEj/cXEDMUTMazM4a71u9o0+
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1932c0319241d0e0f2856f7547a9c822_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE