CancelDll
LoadDll
Behavioral task
behavioral1
Sample
249c55a1dfd2bd7033de828326534313_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
249c55a1dfd2bd7033de828326534313_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
249c55a1dfd2bd7033de828326534313_JaffaCakes118
Size
90KB
MD5
249c55a1dfd2bd7033de828326534313
SHA1
165544a7c85ac02bf86cb720a48949af0debaeab
SHA256
b9274781990ec05ac718cb2d1d458d38ac6a4891826ebe33d2d4f96038f352d4
SHA512
138f3e99ac74476dd00c3182ea033422162860fd1dcda063ce37091f4301a7410236d2f125d6eee1c15f372e710217d51d92e3f1c384d098257f5d63dd51eeae
SSDEEP
1536:YJpsqgQUNFs/L3BBJmw9JHlbytrhN2h6tL4uKED4jAntB0iu:YJOqgjs/L37Jmw9PytFN2h6tL4uugtG
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
249c55a1dfd2bd7033de828326534313_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
CancelDll
LoadDll
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE