CancelDll
LoadDll
Behavioral task
behavioral1
Sample
2490b11505b5520af1059c5db9e9307c_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2490b11505b5520af1059c5db9e9307c_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
2490b11505b5520af1059c5db9e9307c_JaffaCakes118
Size
88KB
MD5
2490b11505b5520af1059c5db9e9307c
SHA1
6f6c40a2ba0bf8d2d49a3fe89ab0fda3815a3dd9
SHA256
1e217b021590565b3d4dfd1f4c8047ece297592fec9e9f3d8f14f4e3aac6d0eb
SHA512
f7787c8acd3c0e636ca098301dd9c01bf30e01dbb587719f9f6d2812a9db3f46f18fa90318068954d6dd81dd32d9708819f67f9872145ccbf71cdcc2d75a7917
SSDEEP
1536:Zr4dVzqJdgJhjJKSY24OhSrGlATACxRZy2I/79kEYXG:ZEdVzq4/j59Chy2I/7PX
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2490b11505b5520af1059c5db9e9307c_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE