CancelDll
LoadDll
Behavioral task
behavioral1
Sample
1c7e9176e9d29ed3ab719b0e631ab3ac_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1c7e9176e9d29ed3ab719b0e631ab3ac_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
1c7e9176e9d29ed3ab719b0e631ab3ac_JaffaCakes118
Size
129KB
MD5
1c7e9176e9d29ed3ab719b0e631ab3ac
SHA1
b054eae5e4cf01de8ba04ac32e6b6623af0d1134
SHA256
68b6101ad697f46f4f2b17ed4b4392ad65889cf9d62f4aa61e193e9308aa04f9
SHA512
32e8ed43f26db6361fdc6e45ff0a41357b59b9c0c9bb5e69169951dd8f49597dfbfc0d806696797a41e774a4c9ea380a8d6b00f2cec549ce4c83ddc34a611e35
SSDEEP
1536:pUEkUaLBLNH8DHMCTisgGe9phKeJCJmMzigIpp4i+P:DExNcLMv9pRJCTODD+P
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
1c7e9176e9d29ed3ab719b0e631ab3ac_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE