CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1b6a10d660bd6396e2922622969a8d4f_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
1b6a10d660bd6396e2922622969a8d4f_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1b6a10d660bd6396e2922622969a8d4f_JaffaCakes118
Size
87KB
MD5
1b6a10d660bd6396e2922622969a8d4f
SHA1
b3f9d2adb1483408f54da6cd937f89cdfcaa18c9
SHA256
e1f764c95911c90566bc53c3d4c783d3dfa72320e69c3269481fc9d45851abb9
SHA512
98976a3fc799677db961aa27ee0c4b701a819890461b66d737ff2f62496c9a9f4d0da459981524990ef19f3129ea0ec892b2559e57d47b6561af0954e64b9d5d
SSDEEP
1536:INWujxA5EY8fwKVqi2XOyolF3yGU4Y5m+9:x/2Y84Cjs0YGG5m+9
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1b6a10d660bd6396e2922622969a8d4f_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE