CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1a876ea55bdaf6333e8caf57ac0c9eb3_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
1a876ea55bdaf6333e8caf57ac0c9eb3_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1a876ea55bdaf6333e8caf57ac0c9eb3_JaffaCakes118
Size
106KB
MD5
1a876ea55bdaf6333e8caf57ac0c9eb3
SHA1
f11f5865b0792afe3e4971ea6f33e38e1ace41d3
SHA256
578bf1d3c7a4d61f69af3253457f1b41c919e10b3b67ccea4fdae3b567aa13e4
SHA512
e21c4cda67d70f3678faf997ba538466ffd06c686bc20c886ee9596a603484466298f23705b02520082582d78a2bc3d3641b92f8e619370256e7d6ba161cc037
SSDEEP
1536:SQclh8MIwu5+oYL2OK/+5bzG7AFIanbzFFj6hBjsU9iE99B1jrfVLnAr8:ahdIw/oYKGEZabzjj6hBjNT97ZfRnAI
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1a876ea55bdaf6333e8caf57ac0c9eb3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE