CancelDll
LoadDll
Behavioral task
behavioral1
Sample
247f2d0f925c4889ca6a2e4d3b599801_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
247f2d0f925c4889ca6a2e4d3b599801_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
247f2d0f925c4889ca6a2e4d3b599801_JaffaCakes118
Size
105KB
MD5
247f2d0f925c4889ca6a2e4d3b599801
SHA1
cc6b46b908ff336738ba302c2cda9b9ece432283
SHA256
19887fe53a016cca8ece9f4c2fd48672e340b268489c0c1fb8707cbcecc5d77f
SHA512
82b435551fdb6ce48c7c0fa9fade0d9e3b6e12f927f2e91ab35232cd5f0869b043eeb0ddcc207d18ca69b9078b07d260172ea3a6a521fd39619a66d9e647fe29
SSDEEP
1536:PiEjmRHQMDgVspbuFLdVvuZrEaPX/6u6ylu3UOAaXdOw6uGFp0clBSftlgS5k4:6SFMDgVswFLdNkIaPX/6unYHO6FCogKR
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
247f2d0f925c4889ca6a2e4d3b599801_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE