CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1a206abfd1cd4dcc9e3998f372f99948_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1a206abfd1cd4dcc9e3998f372f99948_JaffaCakes118.dll
Resource
win10v2004-20240226-en
Target
1a206abfd1cd4dcc9e3998f372f99948_JaffaCakes118
Size
95KB
MD5
1a206abfd1cd4dcc9e3998f372f99948
SHA1
c69b5ca7e197e9e502c5516c0494b7f553cb49d3
SHA256
bf87759518b3fe37b095ae377f2ec78181dc2fce84e12f564a9dcd91260372ab
SHA512
e843a4005a0468b2f72e09c924afc3a2a0f496f803ba67148e954b491b069107fb08e2aa053c5fad984f26a4ef627852bfd3742b1fc8449c06debb60c592dbc7
SSDEEP
1536:UdVYsWgcQV6w/jdt9YD6QcZCgjb/Fudozv/eJa0JbbVkHESeYB4C3cn9s05CyN:Ud5W8kw/jdt9YDJyCgvNH3/WVkkSeYB4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a206abfd1cd4dcc9e3998f372f99948_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE