CancelDll
LoadDll
Behavioral task
behavioral1
Sample
236b9c824b627236c6982ae4394e9fc3_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
236b9c824b627236c6982ae4394e9fc3_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
236b9c824b627236c6982ae4394e9fc3_JaffaCakes118
Size
101KB
MD5
236b9c824b627236c6982ae4394e9fc3
SHA1
b4c1df3865c98d109fefd5fa5f9b5c2f497d81e2
SHA256
7d9d39889e1bb8795ef3a57d4cde61154e41d35a2798b88589247da07931dae3
SHA512
daa764cd10ce429073a89fbab161f161eb78f717681f9edb72ce976a35509316e712131c04a8ae07a3e4ad425dff826e940b7179fcc1e0b0bf993155a4d7fe7b
SSDEEP
1536:lmoLIIWdNE9jv4LsFgIseG5oHkY75NptdKqxhLkRqoYRmRfsCK7aXXDDTHf:02RWdNEp4LsiN9ENrxhA3YARi7aXr/
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
236b9c824b627236c6982ae4394e9fc3_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE