CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1ac4d1fa63bba69f8951a850bcca768b_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1ac4d1fa63bba69f8951a850bcca768b_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1ac4d1fa63bba69f8951a850bcca768b_JaffaCakes118
Size
94KB
MD5
1ac4d1fa63bba69f8951a850bcca768b
SHA1
7a1dfe169a6b8112fa95d624904af6e7857d93bc
SHA256
40b6061fde16a2443af181176dc661afcbae9bf05a23645db5e13eba1ba398e9
SHA512
d37f5569e75bddbd448456cb65632d009c5b32dc495c2c7523830bc8c70d64d21e1abde0f81bffa4343d604fcebbcab5ee3805f185b531ac1b54abcac5b97240
SSDEEP
1536:INWujxA5EY8fwKVePcYbOrt71ltUKuYDymD2Ov6CqtBU3Y8I/GFN:x/2Y84CexbOJ7uKuYGmD36CqtW3YLy
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1ac4d1fa63bba69f8951a850bcca768b_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE