CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1af0a95f9648fef1d46b2a199871dd2a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1af0a95f9648fef1d46b2a199871dd2a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
1af0a95f9648fef1d46b2a199871dd2a_JaffaCakes118
Size
87KB
MD5
1af0a95f9648fef1d46b2a199871dd2a
SHA1
4a04d7ca42ecbdccc0a089f0b7386bde08f379ba
SHA256
9ae21f1a3b830521f1e57c2b27b83720e03a8b1c7da0b42b5e2a36dae9fbca5a
SHA512
e209add7598484969fb89aadfdafda445234b1bce7bc7b4707e78f5c0b78a7d04cbf6bd2b6e0b144e10c74757b79bbe02ae66d78d3432902da0d2d139f75ce5a
SSDEEP
1536:RosSg4ngB/6hVBQqZiTOHj6PRiF4pflXyVJcnRaxWK:1SoB/676qZiiD6HdXyEn9K
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1af0a95f9648fef1d46b2a199871dd2a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE