CancelDll
LoadDll
Behavioral task
behavioral1
Sample
19edcf04c35b8bdf8509ac17746096a3_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
19edcf04c35b8bdf8509ac17746096a3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
19edcf04c35b8bdf8509ac17746096a3_JaffaCakes118
Size
133KB
MD5
19edcf04c35b8bdf8509ac17746096a3
SHA1
ead7d9680e9e7c0b6b816829584f968f3b999a74
SHA256
64018c69ee05e5598f18868bc285b84d0d7848624117964cfe624bcf2a99acd6
SHA512
17808062dbca4534ad2d24772932ae5a0ca01292f26a41451ab932910573784c7bd385ebeecded6ca2af901a769e72b975b69b5991e6ccf032f174e2356c303a
SSDEEP
1536:MDEFUawhF/H8fOJjD6tFey2P8DERv5xHCi4LIU0DPzxD56x51wULjcanRh:j4D/c8DIvETxii4fkjQ9Lj1Rh
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
19edcf04c35b8bdf8509ac17746096a3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE