CancelDll
LoadDll
Behavioral task
behavioral1
Sample
235918803ed25351b1f375e9ecef0f24_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
235918803ed25351b1f375e9ecef0f24_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
235918803ed25351b1f375e9ecef0f24_JaffaCakes118
Size
99KB
MD5
235918803ed25351b1f375e9ecef0f24
SHA1
047eacf5fd9b5dabbe2fa70052791e26484a32bb
SHA256
d01d75df3c63bcc8647aee3137ed7c1f4f7c870858525dbc37302ee9c9f55b42
SHA512
be8d5d09510a37489fc9d47b0e65584bf623c7c755ff82f8d7122d441215d49ad9a38bb0e18b11e8175c4487ecdd86e44f77af4c4e12322e7cf67e2ac1766317
SSDEEP
1536:7rOUbmJ/ZS8DDfNjww7woXf3TDUCBF8bRKsAPJo+20:FbmhoODfNjdkov3HU6FoosIS+20
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
235918803ed25351b1f375e9ecef0f24_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE