CancelDll
LoadDll
Behavioral task
behavioral1
Sample
23759dec5fbff38612d207e0de99e739_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
23759dec5fbff38612d207e0de99e739_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
23759dec5fbff38612d207e0de99e739_JaffaCakes118
Size
93KB
MD5
23759dec5fbff38612d207e0de99e739
SHA1
684267bed3c03c4e9233a0cb7a67d9a27e1bc4fd
SHA256
ebc6ccf2d3414512b07e7b58370659315100b2a7a244d1f5ad52d46a69ecab4f
SHA512
4104e1049df09005011346f4ff5ac464878f29d73ac207f9575b150b8fb1da61e6d6b671013b3794fcc66ea67454eee52fe95a96c6e03c00fdb12469731ba4e0
SSDEEP
1536:0SBGICmjXCTyBetAx9tSWwm50xHp9W3r+fZaLRugtBAUKN9p:/BMmjXCoDf50x7W3KfcNKN9p
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
23759dec5fbff38612d207e0de99e739_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE