CancelDll
LoadDll
Behavioral task
behavioral1
Sample
22674929acfb3d6915e0ca8f70dbd54a_JaffaCakes118.dll
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
22674929acfb3d6915e0ca8f70dbd54a_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
22674929acfb3d6915e0ca8f70dbd54a_JaffaCakes118
Size
115KB
MD5
22674929acfb3d6915e0ca8f70dbd54a
SHA1
9532eec11d6c5571ff0db99d655f46252ce24c9b
SHA256
c16491f81a1dee72e48555b3af29b3297307b79380e65fdfbeac791a2279c55b
SHA512
fe74ad5c1d882d707ac760308ff67eba9baa6c3aaf7814b1455ea8aa7f61065c6a71e5a101aaefdb03d1a0304bdad81984315710a1c479c56c64b1b8b4911b28
SSDEEP
3072:TDGYLwwNWBNGLNt5vb7qe+M9C1dynsmS9:nwwNWYfhb7qe99vsm2
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
22674929acfb3d6915e0ca8f70dbd54a_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE