CancelDll
LoadDll
Behavioral task
behavioral1
Sample
268cd03396d7093f56be214b98de95be_JaffaCakes118.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
268cd03396d7093f56be214b98de95be_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
268cd03396d7093f56be214b98de95be_JaffaCakes118
Size
96KB
MD5
268cd03396d7093f56be214b98de95be
SHA1
00b5fe4e8166f7abfcc6cdb2476d79f0e5e095e7
SHA256
464fc8ee96e7d10fa4a67ad9dcfea5a08e17857b5c8d16de50e6547e3389679e
SHA512
8e2a339fc193b292457473bdd0a8a325d675c0b878dccc5272a324c5564bf85d762c3de3c83b00da33d436a26d126abbea3f7995541cb91f443848207c5a51f5
SSDEEP
1536:lmoLIIWdNE9jv4LsFgImMt4MpA++ftDaD8YEcGBGrOyQ2h8JgHY:02RWdNEp4LsixMCMpsftC8BiO/O4
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
268cd03396d7093f56be214b98de95be_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE