CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1ad0a24c29d173bf85da518112f0e703_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
1ad0a24c29d173bf85da518112f0e703_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1ad0a24c29d173bf85da518112f0e703_JaffaCakes118
Size
91KB
MD5
1ad0a24c29d173bf85da518112f0e703
SHA1
c90a83d604741d4d017d29b069e7b02b5945c484
SHA256
cf68bf04ae8fa38f8186abc0f8005ffcc18d92d4e3bb182982b3ee2b31618955
SHA512
feb457f3c2e53cc726b27e52aefe8d8a5e4664828b3e90e2bb9028b2fc697afae5c2584d955a5f6b98abccb7099fc2da15e0bfd70be918aa746448c44a5c1409
SSDEEP
1536:LmSQNbJE1vj8gDxkO4aG4oPk+YvDxsva71qF6+QubKG:LmFty1L8gDyO01M+YLxfpO5L
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1ad0a24c29d173bf85da518112f0e703_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE