CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1a021a175664663db0790eeb32d9611b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a021a175664663db0790eeb32d9611b_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a021a175664663db0790eeb32d9611b_JaffaCakes118
Size
98KB
MD5
1a021a175664663db0790eeb32d9611b
SHA1
2c20f9e23bc1cce6eb02fdc5931a73c0de02016f
SHA256
b083b0c9459a0187b1b1a73b4a39becaf2ded6dd42339268ed83f9ae46560827
SHA512
99f36da63eb859abe58d0175be953e566abafa32b4bccae9ed6faa12be74ce368651e839bd3f7b318e14c50530e740a832502a6df726f4905ced4e1c71ea916c
SSDEEP
3072:uRtNn1pU0S8XFFMsIbsJ1Y5fXe6LvurtH0DMAUCWv1:uRtp1+a+RsJIfXtyN0uCG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a021a175664663db0790eeb32d9611b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE