CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2652283034b3817b5c0d167826bc7fde_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2652283034b3817b5c0d167826bc7fde_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
2652283034b3817b5c0d167826bc7fde_JaffaCakes118
Size
94KB
MD5
2652283034b3817b5c0d167826bc7fde
SHA1
2b3af8c2c32a8aae68fa691c6eda44460da571ef
SHA256
9500c68dd007ce152f15e21e2db1c90d125f0a4ccda8333ea338ec83d9506a7d
SHA512
227eb2479acf9f53c4e6af67db1d13fdee9cf0c4fb8161fd2f27b9e16c770d92a84f3f8c1977cab53265c97a0bf3cb2bfeba0474907af20c3c1eabae0836d9f6
SSDEEP
1536:RosSg4ngB/6hVU1IQglRw5km122SMOKh9lRjY7yacKwx13rX:1SoB/67UbgTWkm17ZOKvjCya9q17
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2652283034b3817b5c0d167826bc7fde_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE