CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1a77dc42236b0448b825d0a8b5ef4e12_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1a77dc42236b0448b825d0a8b5ef4e12_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a77dc42236b0448b825d0a8b5ef4e12_JaffaCakes118
Size
98KB
MD5
1a77dc42236b0448b825d0a8b5ef4e12
SHA1
5c93f5793ae26942a9c353202bae45cf398356d9
SHA256
fa5d55c5da42d8fbd515bc9cbbe2b43a98e6e3c119e614c4c954b206802ce508
SHA512
2979aa600e3219a771af22d4da98a755185effb20cf5d584d0139fa233e9c5deb5ebd28e03543cf9b0ac09775e44fd11cf9e1337f23409d67c3eb362d2d5d4ca
SSDEEP
1536:YXHoPktJDJg52W0Ieujf0JkagbRP29tpUuh0gEY76ODwbgyNG204NERZNH:cftJCL0Ieuj0bQR0zUo0gCc402k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a77dc42236b0448b825d0a8b5ef4e12_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE